CVE-2021-23240
- State
- Published
- Severity
- Not scored
- Published
- Jan 12, 2021
- Updated
- Aug 3, 2024
- Reserved
- Jan 7, 2021
Description
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2021-23240
- https://www.sudo.ws/stable.html#1.9.5
- FEDORA-2021-324479472cvendor-advisory
- FEDORA-2021-234d14bfccvendor-advisory
- GLSA-202101-33vendor-advisory
- https://security.netapp.com/advisory/ntap-20210129-0010/
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8mailing-list
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.