HIGH 7.8 Microsoft

CVE-2021-23240

selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.

Microsoft Security Update 2021-Jan: selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.

Affected Products

References

Published: 2021-01-12 · Source: Microsoft · Feed updated: 2026-09-07
This high severity vulnerability with a CVSS score of 7.8 was published on 2021-01-12 via Microsoft. Affected: sudo-1.9.5p2-2.cm1.x86_64.rpm on CBL Mariner 1.0 x64, sudo-debuginfo-1.9.5p2-2.cm1.x86_64.rpm on CBL Mariner 1.0 x64, sudo-1.9.5p2-2.cm1.aarch64.rpm on CBL Mariner 1.0 ARM and 1 more.
vulnfeed aggregates 10539 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.