CVE-2021-23240
Description
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
Risk Information
Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.225
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| SUSE-SU-2021:0225-1(SUSE Linux Enterprise Server 12-SP5 ) sudo-1.8.27-4.6.1.x86_64.rpm | Linux |
| SUSE-SU-2021:0225-1(SUSE Linux Enterprise Server 12-SP5 ) sudo-debuginfo-1.8.27-4.6.1.x86_64.rpm | Linux |
| SUSE-SU-2021:0225-1(SUSE Linux Enterprise Server 12-SP5 ) sudo-debugsource-1.8.27-4.6.1.x86_64.rpm | Linux |
| (RHSA-2021:1723) sudo security and bug fix update sudo-1.8.29-7.el8.x86_64.rpm | Linux |
| (RHSA-2021:1723) sudo security and bug fix update sudo-debugsource-1.8.29-7.el8.x86_64.rpm | Linux |
| Improper Link Resolution Before File Access (Link Following) Vulnerability (CVE-2021-23240) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234