{"id":"CVE-2021-23239","aliases":["ALPINE-CVE-2021-23239","BELL-CVE-2021-23239","CLSA-2026-1777377545","CLSA-2026-1777378006","CLSA-2026-1790600964","CLSA-2026-1790601456","CLSA-2026-1790606589","DEBIAN-CVE-2021-23239","DLA-3181-1","EUVD-2021-10338","GHSA-wfrc-r682-56qv","MGASA-2021-0042","OESA-2021-1002","RHSA-2021:1723","RLSA-2021:1723","SUSE-SU-2021:0225-1","SUSE-SU-2021:0226-1","SUSE-SU-2021:0227-1","SUSE-SU-2021:0232-1","UBUNTU-CVE-2021-23239","USN-4705-1","openSUSE-SU-2021:0169-1","openSUSE-SU-2021:0170-1","openSUSE-SU-2024:11413-1"],"status":"published","title":"The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform...","description":"The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.","severity":{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01001,"percentile":0.63082,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2021-01-12T00:00:00Z","modified":"2026-11-03T06:32:38Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"sudo","fixed_in":["1.9.5p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"sudo","fixed_in":["1.9.5p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"sudo","fixed_in":["1.9.5-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"sudo","fixed_in":["1.9.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sudo","fixed_in":["1.9.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sudo","fixed_in":["1.9.5-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"sudo","fixed_in":["1.8.27-1+deb10u4"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"sudo","fixed_in":["1.8.16-0ubuntu1.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"sudo","fixed_in":["1.8.21p2-3ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"sudo","fixed_in":["1.8.31-1ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0"},{"fixed":"1.9.5-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.1.el7_9.3.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.1.el7_9.3.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.1.el7_9.3.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.1.el7_9.3.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-1+deb10u4"}]}],"versions":["1.8.27-1","1.8.27-1+deb10u1","1.8.27-1+deb10u2","1.8.27-1+deb10u3"]},{"source":"osv","ecosystem":"Mageia:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-3.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-3.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.6p3-0ubuntu3","1.8.8-2ubuntu1","1.8.8-2ubuntu2","1.8.9p4-1ubuntu1","1.8.9p4-1ubuntu2","1.8.9p5-1ubuntu1","1.8.9p5-1ubuntu1.1","1.8.9p5-1ubuntu1.2","1.8.9p5-1ubuntu1.3","1.8.9p5-1ubuntu1.4","1.8.9p5-1ubuntu1.5+esm1","1.8.9p5-1ubuntu1.5+esm2","1.8.9p5-1ubuntu1.5+esm3","1.8.9p5-1ubuntu1.5+esm5","1.8.9p5-1ubuntu1.5+esm6","1.8.9p5-1ubuntu1.5+esm7","1.8.9p5-1ubuntu1.5+esm8"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.10"}]}],"versions":["1.8.12-1ubuntu3","1.8.16-0ubuntu1","1.8.16-0ubuntu1.1","1.8.16-0ubuntu1.2","1.8.16-0ubuntu1.3","1.8.16-0ubuntu1.4","1.8.16-0ubuntu1.5","1.8.16-0ubuntu1.6","1.8.16-0ubuntu1.7","1.8.16-0ubuntu1.8","1.8.16-0ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.21p2-3ubuntu1.4"}]}],"versions":["1.8.20p2-1ubuntu1","1.8.21p2-2ubuntu1","1.8.21p2-3ubuntu1","1.8.21p2-3ubuntu1.1","1.8.21p2-3ubuntu1.2","1.8.21p2-3ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.31-1ubuntu1.2"}]}],"versions":["1.8.27-1ubuntu4","1.8.29-1ubuntu1","1.8.31-1ubuntu1","1.8.31-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.10"}]}],"versions":["1.8.12-1ubuntu3","1.8.16-0ubuntu1","1.8.16-0ubuntu1.1","1.8.16-0ubuntu1.2","1.8.16-0ubuntu1.3","1.8.16-0ubuntu1.4","1.8.16-0ubuntu1.5","1.8.16-0ubuntu1.6","1.8.16-0ubuntu1.7","1.8.16-0ubuntu1.8","1.8.16-0ubuntu1.9"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.21p2-3ubuntu1.4"}]}],"versions":["1.8.20p2-1ubuntu1","1.8.21p2-2ubuntu1","1.8.21p2-3ubuntu1","1.8.21p2-3ubuntu1.1","1.8.21p2-3ubuntu1.2","1.8.21p2-3ubuntu1.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.31-1ubuntu1.2"}]}],"versions":["1.8.27-1ubuntu4","1.8.29-1ubuntu1","1.8.31-1ubuntu1","1.8.31-1ubuntu1.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-lp151.5.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-lp152.8.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7p2-1.4"}]}],"bundled":11}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"netapp","product":"hci_management_node"},{"vendor":"netapp","product":"solidfire"},{"vendor":"sudo_project","product":"sudo"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2021-23239","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://www.sudo.ws/stable.html#1.9.5","tags":["x_transferred","Release Notes","Vendor Advisory","advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE42Y35SMJOLONAIBNYNFC7J44UUZ2Y6/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMY4VSSBIND7VAYSN6T7XIWJRWG4GBB3/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202101-33","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210129-0010/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/11/msg00007.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23239","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EE42Y35SMJOLONAIBNYNFC7J44UUZ2Y6/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GMY4VSSBIND7VAYSN6T7XIWJRWG4GBB3/"},{"url":"https://github.com/advisories/GHSA-wfrc-r682-56qv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-23239","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-23239","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777377545.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1777378006.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790600964.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790601456.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790606589.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-23239","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0042.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28067","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2021/01/11/2","tags":["web","report"]},{"url":"https://www.sudo.ws/stable.html","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23240","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:1723","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1915052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1915053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1923825","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1723.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23239","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23239","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23240","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23240","tags":["advisory"]},{"url":"https://www.sudo.ws/alerts/sudoedit_selinux.html","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2021:1723","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210225-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1180684","tags":["report"]},{"url":"https://bugzilla.suse.com/1180685","tags":["report"]},{"url":"https://bugzilla.suse.com/1180687","tags":["report"]},{"url":"https://bugzilla.suse.com/1181090","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3156","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210226-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210227-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210232-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-23239","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4705-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3156","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OQJUG5Z7K425IKZS5GT4KPIBGTT4JMW/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3O463OUKAXLCUM74AUHUPVMQFXLLVAEH/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-4158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18634","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-23239","description":"The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.","status":"published","published":"2021-01-12T00:00:00Z","modified":"2024-08-03T19:05:55.298Z","updated_at":"2026-11-02T14:33:00.488332Z"}],"euvd":[{"id":"EUVD-2021-10338","description":"The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.","status":"published","published":"2021-01-12T00:00:00Z","modified":"2024-08-03T19:05:55Z","updated_at":"2026-11-03T03:25:00.126172Z"}],"ghsa":[{"id":"GHSA-wfrc-r682-56qv","title":"The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform...","description":"The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.","status":"published","published":"2022-05-24T17:38:55Z","modified":"2023-01-28T05:07:08Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:44:29.724528Z"}],"nvd":[{"id":"CVE-2021-23239","description":"The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.","status":"published","published":"2021-01-12T09:15:14.043Z","modified":"2026-06-17T03:38:27.75Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:06:49.284888Z"}],"osv":[{"id":"ALPINE-CVE-2021-23239","description":"The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.","status":"published","published":"2021-01-12T09:15:14.043Z","modified":"2026-11-03T06:32:38.227499742Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"BELL-CVE-2021-23239","title":"CVE-2021-23239 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:42.35079Z","modified":"2026-01-26T09:48:30.542502Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2021-23239","description":"The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.","status":"published","published":"2021-01-12T09:15:14.043Z","modified":"2026-10-24T10:30:42.692777998Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:18.367807Z"},{"id":"DEBIAN-CVE-2021-23239","description":"The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.","status":"published","published":"2021-01-12T09:15:14.043Z","modified":"2026-10-23T18:03:36.812189197Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"OESA-2021-1002","title":"sudo security update","description":"A flaw was found in sudo. A heap-based buffer overflow was found in the way sudo parses command line arguments. This flaw is exploitable by any local user (normal users and system users, sudoers and non-sudoers), without authentication (i.e., the attacker does not need to know the user's password). Successful exploitation of this flaw could lead to privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-3156)\\r\\n\\r\\n\nThe sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.(CVE-2021-23239)\\r\\n\\r\\n\nselinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.(CVE-2021-23240)\\r\\n\\r\\n\n","status":"published","published":"2021-01-28T11:04:13Z","modified":"2026-08-18T01:15:04.616378228Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:1723","title":"Red Hat Security Advisory: sudo security and bug fix update","status":"published","published":"2024-09-16T05:22:58Z","modified":"2026-04-30T10:33:44.359972Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RLSA-2021:1723","title":"Low: sudo security and bug fix update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: symbolic link attack in SELinux-enabled sudoedit (CVE-2021-23240)\n\n* sudo: possible directory existence test due to race condition in sudoedit (CVE-2021-23239)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.","status":"published","published":"2021-05-18T05:55:11Z","modified":"2026-02-05T03:15:12.316665Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-23239","description":"The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.","status":"published","published":"2021-01-12T09:15:00Z","modified":"2026-02-04T03:46:27.811256Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:26.779273Z"},{"id":"CLSA-2026-1777377545","title":"sudo: Fix of 3 CVEs","description":"- CVE-2021-23239: fix potential directory existence info leak in sudoedit\n- CVE-2023-28486: escape control characters in log messages\n- CVE-2023-28487: escape control characters in sudoreplay output","status":"published","published":"2026-04-28T11:59:12Z","modified":"2026-06-01T00:33:27.190080081Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1777378006","title":"sudo: Fix of 3 CVEs","description":"- CVE-2021-23239: fix potential directory existence info leak in sudoedit\n- CVE-2023-28486: escape control characters in log messages\n- CVE-2023-28487: escape control characters in sudoreplay output","status":"published","published":"2026-04-28T12:06:55Z","modified":"2026-06-01T00:33:20.226937104Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1790600964","title":"sudo: Fix of 7 CVEs","description":"- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources\n- CVE-2025-32462: take the vendor's fix, keep our audit record of the\n  rejected remote host\n- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch);\n  the TuxCare duplicate is dropped\n- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486,\n  CVE-2023-28487, CVE-2023-42465","status":"published","published":"2026-09-28T13:09:33Z","modified":"2026-10-26T09:43:39.785803477Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790601456","title":"sudo: Fix of 7 CVEs","description":"- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources\n- CVE-2025-32462: take the vendor's fix, keep our audit record of the\n  rejected remote host\n- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch);\n  the TuxCare duplicate is dropped\n- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486,\n  CVE-2023-28487, CVE-2023-42465","status":"published","published":"2026-09-28T13:17:45Z","modified":"2026-10-26T09:43:13.516156002Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790606589","title":"sudo: Fix of 7 CVEs","description":"- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources\n- CVE-2025-32462: take the vendor's fix, keep our audit record of the\n  rejected remote host\n- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch);\n  the TuxCare duplicate is dropped\n- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486,\n  CVE-2023-28487, CVE-2023-42465","status":"published","published":"2026-09-30T16:36:16Z","modified":"2026-10-26T09:43:53.696880037Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"DLA-3181-1","title":"sudo - security update","status":"published","published":"2022-11-07T00:00:00Z","modified":"2026-03-09T01:20:32.742184Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2021-0042","title":"Updated sudo packages fix security vulnerabilities","description":"The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged\nuser to perform arbitrary directory-existence tests by winning a sudo_edit.c\nrace condition in replacing a user-controlled directory by a symlink to an\narbitrary path. (CVE-2021-23239).\n\nselinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local\nunprivileged user to gain file ownership and escalate privileges by replacing\na temporary file with a symlink to an arbitrary file target. This affects\nSELinux RBAC support in permissive mode. Machines without SELinux are not\nvulnerable. (CVE-2021-23240).\n","status":"published","published":"2021-01-17T16:07:01Z","modified":"2026-04-16T04:43:05.364588475Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0169-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges \n  [bsc#1181090,CVE-2021-3156]\n- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`\n  [bsc#1180684,CVE-2021-23239]\n- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,\n  CVE-2021-23240]\n- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-27T07:24:44Z","modified":"2026-02-04T04:39:48.293495Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0170-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges \n  [bsc#1181090,CVE-2021-3156]\n- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`\n  [bsc#1180684,CVE-2021-23239]\n- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,\n  CVE-2021-23240]\n- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-27T07:25:26Z","modified":"2026-02-04T02:51:35.187249Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:11413-1","title":"sudo-1.9.7p2-1.4 on GA media","description":"These are all security issues fixed in the sudo-1.9.7p2-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:46:24.949279Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2021:0225-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges \n  [bsc#1181090,CVE-2021-3156]\n- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`\n  [bsc#1180684,CVE-2021-23239]\n- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,\n  CVE-2021-23240]\n- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]\n","status":"published","published":"2021-01-26T18:20:20Z","modified":"2026-02-04T02:56:09.516103Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0226-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges \n  [bsc#1181090,CVE-2021-3156]\n- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`\n  [bsc#1180684,CVE-2021-23239]\n- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,\n  CVE-2021-23240]\n- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]\n","status":"published","published":"2021-01-26T18:21:06Z","modified":"2026-02-04T03:26:29.23007Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0227-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges \n  [bsc#1181090,CVE-2021-3156]\n- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`\n  [bsc#1180684,CVE-2021-23239]\n- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,\n  CVE-2021-23240]\n- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]\n","status":"published","published":"2021-01-26T18:23:08Z","modified":"2026-02-04T02:26:21.838032Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0232-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges \n  [bsc#1181090,CVE-2021-3156]\n- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`\n  [bsc#1180684,CVE-2021-23239]\n  ","status":"published","published":"2021-01-27T09:29:32Z","modified":"2025-05-02T04:10:34.358538Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-4705-1","title":"sudo vulnerabilities","description":"It was discovered that Sudo incorrectly handled memory when parsing command\nlines. A local attacker could possibly use this issue to obtain unintended\naccess to the administrator account. (CVE-2021-3156)\n\nIt was discovered that the Sudo sudoedit utility incorrectly handled\nchecking directory permissions. A local attacker could possibly use this\nissue to bypass file permissions and determine if a directory exists or\nnot.  (CVE-2021-23239)\n","status":"published","published":"2021-01-26T18:48:16Z","modified":"2026-04-27T16:03:35.496549186Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}