LOW 2.5 Microsoft

CVE-2021-23239

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.

Microsoft Security Update 2021-Jan: The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.

Affected Products

References

Published: 2021-01-12 · Source: Microsoft · Feed updated: 2026-09-07
This low severity vulnerability with a CVSS score of 2.5 was published on 2021-01-12 via Microsoft. Affected: sudo-1.9.5p2-2.cm1.x86_64.rpm on CBL Mariner 1.0 x64, sudo-debuginfo-1.9.5p2-2.cm1.x86_64.rpm on CBL Mariner 1.0 x64, sudo-1.9.5p2-2.cm1.aarch64.rpm on CBL Mariner 1.0 ARM and 1 more.
vulnfeed aggregates 10539 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.