CVE-2021-23239

2021-01-1200:00:00

ubuntu.com

2.5 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

38.7%

JSON

The sudoedit personality of Sudo before 1.9.5 may allow a local
unprivileged user to perform arbitrary directory-existence tests by winning
a sudo_edit.c race condition in replacing a user-controlled directory by a
symlink to an arbitrary path.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchsudo< 1.8.21p2-3ubuntu1.4UNKNOWN
ubuntu20.04noarchsudo< 1.8.31-1ubuntu1.2UNKNOWN
ubuntu20.10noarchsudo< 1.9.1-1ubuntu1.1UNKNOWN
ubuntu21.04noarchsudo< 1.9.4p2-2ubuntu2UNKNOWN
ubuntu21.10noarchsudo< 1.9.4p2-2ubuntu2UNKNOWN
ubuntu22.04noarchsudo< 1.9.4p2-2ubuntu2UNKNOWN
ubuntu22.10noarchsudo< 1.9.4p2-2ubuntu2UNKNOWN
ubuntu23.04noarchsudo< 1.9.4p2-2ubuntu2UNKNOWN
ubuntu23.10noarchsudo< 1.9.4p2-2ubuntu2UNKNOWN
ubuntu14.04noarchsudo< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	sudo	< 1.8.21p2-3ubuntu1.4	UNKNOWN
ubuntu	20.04	noarch	sudo	< 1.8.31-1ubuntu1.2	UNKNOWN
ubuntu	20.10	noarch	sudo	< 1.9.1-1ubuntu1.1	UNKNOWN
ubuntu	21.04	noarch	sudo	< 1.9.4p2-2ubuntu2	UNKNOWN
ubuntu	21.10	noarch	sudo	< 1.9.4p2-2ubuntu2	UNKNOWN
ubuntu	22.04	noarch	sudo	< 1.9.4p2-2ubuntu2	UNKNOWN
ubuntu	22.10	noarch	sudo	< 1.9.4p2-2ubuntu2	UNKNOWN
ubuntu	23.04	noarch	sudo	< 1.9.4p2-2ubuntu2	UNKNOWN
ubuntu	23.10	noarch	sudo	< 1.9.4p2-2ubuntu2	UNKNOWN
ubuntu	14.04	noarch	sudo	< any	UNKNOWN