CVE-2021-23240
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to...
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
- Record
CVE-2021-23240- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
- Record
CVE-2021-23240- Updated
- 2026-11-02
EUVDEUVD-2021-10339 No score
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
- Record
EUVD-2021-10339- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q7hf-7qcc-gmg8 No score
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to...
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
- Record
GHSA-q7hf-7qcc-gmg8- Weakness
- CWE-59
- Updated
- 2026-11-02
OSVALPINE-CVE-2021-23240
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
- Record
ALPINE-CVE-2021-23240- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVBELL-CVE-2021-23240
CVE-2021-23240 does not affect BellSoft software
- Record
BELL-CVE-2021-23240- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 21 moreShow less
OSV
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
- Record
CVE-2021-23240- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-23240
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
- Record
DEBIAN-CVE-2021-23240- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2021-1002
sudo security update
A flaw was found in sudo. A heap-based buffer overflow was found in the way sudo parses command line arguments. This flaw is exploitable by any local user (normal users and system users, sudoers and non-sudoers), without authentication (i.e., the attacker does not need to know the user's password). Successful exploitation of this flaw could lead to privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-3156)\r\n\r\n The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.(CVE-2021-23239)\r\n\r\n selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.(CVE-2021-23240)\r\n\r\n
- Record
OESA-2021-1002- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:1723
Red Hat Security Advisory: sudo security and bug fix update
- Record
RHSA-2021:1723- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2021:1723
Low: sudo security and bug fix update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
-
sudo: symbolic link attack in SELinux-enabled sudoedit (CVE-2021-23240)
-
sudo: possible directory existence test due to race condition in sudoedit (CVE-2021-23239)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.
- Record
RLSA-2021:1723- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-23240
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
- Record
UBUNTU-CVE-2021-23240- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2021-1625650209 No score
Fix of CVE: CVE-2021-23240
- sudo-1.8.6p3-CVE-2021-23240-2.patch: fixed issue with credentials management in sudoedit
- sudo-1.8.6p3-CVE-2021-23240-3.patch: fixed issue with origin file removal in sesh
- Record
CLSA-2021-1625650209- Updated
- 2026-11-02
OSVCLSA-2021-1634925704 No score
Fixed CVE-2021-23240 in sudo
- sudo-1.8.6p3-CVE-2021-23240-2.patch: fixed issue with credentials management in sudoedit
- sudo-1.8.6p3-CVE-2021-23240-3.patch: fixed issue with origin file removal in sesh
- Record
CLSA-2021-1634925704- Updated
- 2026-11-02
OSVCLSA-2021-1635459277 No score
Fix CVE(s): CVE-2021-23240
- SECURITY UPDATE: privilege escalation via symlinks
- debian/patches/CVE-2021-23240.patch: fix opportunity for local unprivileged user to gain file ownership via symlinks.
- CVE-2021-23240
- Record
CLSA-2021-1635459277- Updated
- 2026-11-02
OSVCLSA-2023-1688678678 No score
Fix CVE(s): CVE-2021-23240
- SECURITY UPDATE: privilege escalation via symlinks
- debian/patches/CVE-2021-23240.patch: fix opportunity for local unprivileged user to gain file ownership via symlinks.
- CVE-2021-23240
- Record
CLSA-2023-1688678678- Updated
- 2026-11-02
OSVCLSA-2025-1761325294 No score
Fix CVE(s): CVE-2021-23240, CVE-2023-42465, CVE-2025-32462
- SECURITY UPDATE: privilege escalation via symlinks
- debian/patches/CVE-2021-23240.patch: fix opportunity for local unprivileged user to gain file ownership via symlinks.
- SECURITY UPDATE: unauthorized commands execution on unintended hosts
- debian/patches/CVE-2025-32462.patch: restrict user from setting remote host for command unless listing privileges
- CVE-2025-32462
- SECURITY UPDATE: row hammer attack
- debian/patches/CVE-2023-42465.patch: make return values resist to single bit flips
- CVE-2023-42465
- Record
CLSA-2025-1761325294- Updated
- 2026-11-02
OSVCLSA-2026-1790600964 No score
sudo: Fix of 7 CVEs
- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
- CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
- Record
CLSA-2026-1790600964- Updated
- 2026-11-02
OSVCLSA-2026-1790601456 No score
sudo: Fix of 7 CVEs
- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
- CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
- Record
CLSA-2026-1790601456- Updated
- 2026-11-02
OSVCLSA-2026-1790606589 No score
sudo: Fix of 7 CVEs
- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
- CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
- Record
CLSA-2026-1790606589- Updated
- 2026-11-02
OSVMGASA-2021-0042 No score
Updated sudo packages fix security vulnerabilities
The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path. (CVE-2021-23239).
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable. (CVE-2021-23240).
- Record
MGASA-2021-0042- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0169-1 No score
Security update for sudo
This update for sudo fixes the following issues:
- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156]
- It was possible for a user to test for the existence of a directory due to a Race Condition in
sudoedit[bsc#1180684,CVE-2021-23239] - A Possible Symlink Attack vector existed in
sudoeditif SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240] - It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2021:0169-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0170-1 No score
Security update for sudo
This update for sudo fixes the following issues:
- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156]
- It was possible for a user to test for the existence of a directory due to a Race Condition in
sudoedit[bsc#1180684,CVE-2021-23239] - A Possible Symlink Attack vector existed in
sudoeditif SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240] - It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2021:0170-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11413-1 No score
sudo-1.9.7p2-1.4 on GA media
These are all security issues fixed in the sudo-1.9.7p2-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11413-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0225-1 No score
Security update for sudo
This update for sudo fixes the following issues:
- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156]
- It was possible for a user to test for the existence of a directory due to a Race Condition in
sudoedit[bsc#1180684,CVE-2021-23239] - A Possible Symlink Attack vector existed in
sudoeditif SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240] - It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
- Record
SUSE-SU-2021:0225-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0226-1 No score
Security update for sudo
This update for sudo fixes the following issues:
- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156]
- It was possible for a user to test for the existence of a directory due to a Race Condition in
sudoedit[bsc#1180684,CVE-2021-23239] - A Possible Symlink Attack vector existed in
sudoeditif SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240] - It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
- Record
SUSE-SU-2021:0226-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0227-1 No score
Security update for sudo
This update for sudo fixes the following issues:
- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156]
- It was possible for a user to test for the existence of a directory due to a Race Condition in
sudoedit[bsc#1180684,CVE-2021-23239] - A Possible Symlink Attack vector existed in
sudoeditif SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240] - It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
- Record
SUSE-SU-2021:0227-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sudoAlpine:v3.10 |
1.9.0 up to 1.9.5p2-r0 | 1.9.5p2-r0 |
sudoAlpine:v3.11 |
1.9.0 up to 1.9.5p2-r0 | 1.9.5p2-r0 |
sudoAlpine:v3.12 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
sudoAlpine:v3.13 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
sudoAlpine:v3.14 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
sudoAlpine:v3.15 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
sudoAlpine:v3.16 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
sudoAlpine:v3.17 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
sudoAlpine:v3.18 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
sudoAlpine:v3.19 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
Show 67 moreShow less
| Package | Affected | Fixed |
|---|---|---|
sudoAlpine:v3.20 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
sudoAlpine:v3.21 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
sudoAlpine:v3.22 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
sudoAlpine:v3.23 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
sudoAlpine:v3.24 |
1.9.0 up to 1.9.5-r0 | 1.9.5-r0 |
sudoTuxCare:CentOS:6 |
before 1.8.6p3-32.el6.cloudlinux.els | 1.8.6p3-32.el6.cloudlinux.els |
sudo-develTuxCare:CentOS:6 |
before 1.8.6p3-32.el6.cloudlinux.els | 1.8.6p3-32.el6.cloudlinux.els |
sudoTuxCare:OracleLinux:6 |
before 1.8.6p3-32.el6.cloudlinux.els | 1.8.6p3-32.el6.cloudlinux.els |
sudo-develTuxCare:OracleLinux:6 |
before 1.8.6p3-32.el6.cloudlinux.els | 1.8.6p3-32.el6.cloudlinux.els |
sudoTuxCare:Ubuntu:16.04 |
before 1.8.16-0ubuntu1.11 | 1.8.16-0ubuntu1.11 |
sudo-ldapTuxCare:Ubuntu:16.04 |
before 1.8.16-0ubuntu1.11 | 1.8.16-0ubuntu1.11 |
sudoTuxCare:Ubuntu:18.04 |
before 1.8.21p2-3ubuntu1.6+tuxcare.els1 | 1.8.21p2-3ubuntu1.6+tuxcare.els1 |
sudo-ldapTuxCare:Ubuntu:18.04 |
before 1.8.21p2-3ubuntu1.6+tuxcare.els1 | 1.8.21p2-3ubuntu1.6+tuxcare.els1 |
sudoTuxCare:Debian:10 From an advisory covering 3 CVEs |
before 1.8.27-1+deb10u6+tuxcare.els1 | 1.8.27-1+deb10u6+tuxcare.els1 |
sudo-ldapTuxCare:Debian:10 From an advisory covering 3 CVEs |
before 1.8.27-1+deb10u6+tuxcare.els1 | 1.8.27-1+deb10u6+tuxcare.els1 |
sudoTuxCare:RHEL:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudo-develTuxCare:RHEL:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudoTuxCare:OracleLinux:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudo-develTuxCare:OracleLinux:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudoTuxCare:CentOS:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudo-develTuxCare:CentOS:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudoDebian:12 |
before 1.9.5-1 | 1.9.5-1 |
sudoDebian:13 |
before 1.9.5-1 | 1.9.5-1 |
sudoDebian:14 |
before 1.9.5-1 | 1.9.5-1 |
sudoMageia:7 From an advisory covering 2 CVEs |
before 1.9.5-1.mga7 | 1.9.5-1.mga7 |
sudoopenEuler:20.03-LTS From an advisory covering 3 CVEs |
before 1.9.2-3.oe1 | 1.9.2-3.oe1 |
sudoopenEuler:20.03-LTS-SP1 From an advisory covering 3 CVEs |
before 1.9.2-3.oe1 | 1.9.2-3.oe1 |
sudoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:1.8.29-7.el8 | 0:1.8.29-7.el8 |
sudo-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:1.8.29-7.el8 | 0:1.8.29-7.el8 |
sudo-debugsourceRed Hat:enterprise_linux:8::baseos From an advisory covering 2 CVEs |
before 0:1.8.29-7.el8 | 0:1.8.29-7.el8 |
sudoRocky Linux:8 From an advisory covering 2 CVEs |
before 0:1.8.29-7.el8 | 0:1.8.29-7.el8 |
sudoSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 3 CVEs |
before 1.8.27-4.6.1 | 1.8.27-4.6.1 |
sudoSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 3 CVEs |
before 1.8.27-4.6.1 | 1.8.27-4.6.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 3 CVEs |
before 1.8.27-4.6.1 | 1.8.27-4.6.1 |
sudoSUSE:HPE Helion OpenStack 8 From an advisory covering 3 CVEs |
before 1.8.20p2-3.20.1 | 1.8.20p2-3.20.1 |
sudoSUSE:OpenStack Cloud 8 From an advisory covering 3 CVEs |
before 1.8.20p2-3.20.1 | 1.8.20p2-3.20.1 |
sudoSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 1.8.20p2-3.20.1 | 1.8.20p2-3.20.1 |
sudoSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 3 CVEs |
before 1.8.20p2-3.20.1 | 1.8.20p2-3.20.1 |
sudoSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 3 CVEs |
before 1.8.20p2-3.20.1 | 1.8.20p2-3.20.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 3 CVEs |
before 1.8.20p2-3.20.1 | 1.8.20p2-3.20.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 3 CVEs |
before 1.8.20p2-3.20.1 | 1.8.20p2-3.20.1 |
sudoSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 3 CVEs |
before 1.8.20p2-3.20.1 | 1.8.20p2-3.20.1 |
sudoSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 3 CVEs |
before 1.8.20p2-3.20.1 | 1.8.20p2-3.20.1 |
sudoSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 3 CVEs |
before 1.8.20p2-3.20.1 | 1.8.20p2-3.20.1 |
sudoSUSE:Enterprise Storage 5 From an advisory covering 3 CVEs |
before 1.8.20p2-3.20.1 | 1.8.20p2-3.20.1 |
sudoSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Manager Proxy 4.0 From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Manager Retail Branch Server 4.0 From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Manager Server 4.0 From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoSUSE:Enterprise Storage 6 From an advisory covering 3 CVEs |
before 1.8.22-4.15.1 | 1.8.22-4.15.1 |
sudoUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.8.6p3-0ubuntu31.8.8-2ubuntu11.8.8-2ubuntu21.8.9p4-1ubuntu11.8.9p4-1ubuntu2 Show 12 moreShow less1.8.9p5-1ubuntu11.8.9p5-1ubuntu1.11.8.9p5-1ubuntu1.21.8.9p5-1ubuntu1.31.8.9p5-1ubuntu1.41.8.9p5-1ubuntu1.5+esm11.8.9p5-1ubuntu1.5+esm21.8.9p5-1ubuntu1.5+esm31.8.9p5-1ubuntu1.5+esm51.8.9p5-1ubuntu1.5+esm61.8.9p5-1ubuntu1.5+esm71.8.9p5-1ubuntu1.5+esm8 |
None known |
sudoUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.8.12-1ubuntu31.8.16-0ubuntu11.8.16-0ubuntu1.11.8.16-0ubuntu1.21.8.16-0ubuntu1.3 Show 10 moreShow less1.8.16-0ubuntu1.41.8.16-0ubuntu1.51.8.16-0ubuntu1.61.8.16-0ubuntu1.71.8.16-0ubuntu1.81.8.16-0ubuntu1.91.8.16-0ubuntu1.101.8.16-0ubuntu1.10+esm11.8.16-0ubuntu1.10+esm21.8.16-0ubuntu1.10+esm3 |
None known |
sudoUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.8.20p2-1ubuntu11.8.21p2-2ubuntu11.8.21p2-3ubuntu11.8.21p2-3ubuntu1.11.8.21p2-3ubuntu1.2 Show 5 moreShow less1.8.21p2-3ubuntu1.31.8.21p2-3ubuntu1.41.8.21p2-3ubuntu1.51.8.21p2-3ubuntu1.61.8.21p2-3ubuntu1.6+esm1 |
None known |
sudoUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.8.27-1ubuntu41.8.29-1ubuntu11.8.31-1ubuntu11.8.31-1ubuntu1.11.8.31-1ubuntu1.21.8.31-1ubuntu1.41.8.31-1ubuntu1.51.8.31-1ubuntu1.5+esm1 |
None known |
sudoopenSUSE:Leap 15.1 From an advisory covering 3 CVEs |
before 1.8.22-lp151.5.12.1 | 1.8.22-lp151.5.12.1 |
sudoopenSUSE:Leap 15.2 From an advisory covering 3 CVEs |
before 1.8.22-lp152.8.6.1 | 1.8.22-lp152.8.6.1 |
sudoopenSUSE:Tumbleweed From an advisory covering 11 CVEs |
before 1.9.7p2-1.4 | 1.9.7p2-1.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-23240 is a high vulnerability (CVSS 7.8) in Sudo Project Sudo, published January 12, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.08%, the 65th percentile. Fixed in sudo 1.9.5p2-r0.
References
bugzilla.suse.com/show_bug.cgi?id=CVE-2021-23240
sudo.ws/stable.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE42Y35SMJOLONAIBNYNFC7J44UUZ2Y6
security.gentoo.org/glsa/202101-33
security.netapp.com/advisory/ntap-20210129-0010
Show 59 moreShow less
lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2021-23240
github.com/advisories/GHSA-q7hf-7qcc-gmg8
security.alpinelinux.org/vuln/CVE-2021-23240
docs.bell-sw.com/security/cves/CVE-2021-23240
errata.cloudlinux.com/els6/CLSA-2021-1625650209.html
errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761325294.html
security-tracker.debian.org/tracker/CVE-2021-23240
advisories.mageia.org/MGASA-2021-0042.html
bugs.mageia.org/show_bug.cgi?id=28067
openwall.com/lists/oss-security/2021/01/11/2
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1002
access.redhat.com/errata/RHSA-2021:1723
bugzilla.redhat.com/show_bug.cgi?id=1915052
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1723.json
cve.org/CVERecord?id=CVE-2021-23239
errata.rockylinux.org/RLSA-2021:1723
suse.com/support/update/announcement/2021/suse-su-20210225-1
ubuntu.com/security/CVE-2021-23240
lists.opensuse.org/archives/list/[email protected]/thread/7OQJUG5Z7K425IKZS5GT4KPIBGTT4JMW