Lucene search

K
cvelistMitreCVELIST:CVE-2021-23239
HistoryJan 12, 2021 - 12:00 a.m.

CVE-2021-23239

2021-01-1200:00:00
mitre
www.cve.org
16
sudo
cve-2021-23239
arbitrary directory
local unprivileged user

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

39.6%

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.