UpHeron
All vulnerabilities

Servers and applications

CVE-2021-23239

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.

Severity
Low 2.5
Published
12 Jan 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.8.32, 1.9.5
Sources
NVD

Affected software

SoftwareAffected versions
sudoServers and applications · cpe:a:sudo_project:sudo
  • Every version before 1.8.32
  • From 1.9.0 before 1.9.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-23239
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-23239