HIGH 7.8 Microsoft
CVE-2021-23240
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
Microsoft Security Update 2021-Jan: selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
Affected Products
- sudo-1.9.5p2-2.cm1.x86_64.rpm on CBL Mariner 1.0 x64
- sudo-debuginfo-1.9.5p2-2.cm1.x86_64.rpm on CBL Mariner 1.0 x64
- sudo-1.9.5p2-2.cm1.aarch64.rpm on CBL Mariner 1.0 ARM
- sudo-debuginfo-1.9.5p2-2.cm1.aarch64.rpm on CBL Mariner 1.0 ARM
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-23240
- https://nvd.nist.gov/vuln/detail/CVE-2021-23240
This high severity vulnerability with a CVSS score of 7.8 was published on 2021-01-12 via Microsoft. Affected: sudo-1.9.5p2-2.cm1.x86_64.rpm on CBL Mariner 1.0 x64, sudo-debuginfo-1.9.5p2-2.cm1.x86_64.rpm on CBL Mariner 1.0 x64, sudo-1.9.5p2-2.cm1.aarch64.rpm on CBL Mariner 1.0 ARM and 1 more.
vulnfeed aggregates 10539 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.