CVE-2021-23239

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.

References

Affected packages

Git / github.com/millert/sudo

Affected ranges

Type: GIT
Repo: https://github.com/millert/sudo
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

caa666c2dfa1f4286ccfbed5e512432665b72d3a

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23239.json"

Git / github.com/sudo-project/sudo

Affected ranges

Type: GIT
Repo: https://github.com/sudo-project/sudo
Events: Introduced

83d1bee918147a57804de77d3e1064a4e323f47e

Fixed

10d072a320c885e2e805ef2e47fe7a2ebde68abc

Affected versions

Other

SUDO_1_9_0

SUDO_1_9_1

SUDO_1_9_2

SUDO_1_9_3

SUDO_1_9_3p1

SUDO_1_9_4

SUDO_1_9_4p1

SUDO_1_9_4p2

v1.*

v1.9.0

v1.9.1

v1.9.2

v1.9.3

v1.9.3p1

v1.9.4

v1.9.4p1

v1.9.4p2

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23239.json"