Vulnerability · Published Jan 12, 2021 · Assigned by mitre
CVE-2021-23240
High 7.8
In plain English
A high-severity security flaw in the sudo package (Alpine). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.8High
Exploit odds (30 days)1.1%top 34.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | sudo | 1.9.5-r0 | ALPINE-CVE-2021-23240 |
| Alpine:v3.21 | sudo | 1.9.5-r0 | ALPINE-CVE-2021-23240 |
| Alpine:v3.22 | sudo | 1.9.5-r0 | ALPINE-CVE-2021-23240 |
| Alpine:v3.23 | sudo | 1.9.5-r0 | ALPINE-CVE-2021-23240 |
| Alpine:v3.24 | sudo | 1.9.5-r0 | ALPINE-CVE-2021-23240 |
| Debian:12 | sudo | 1.9.5-1 | DEBIAN-CVE-2021-23240 |
| Debian:13 | sudo | 1.9.5-1 | DEBIAN-CVE-2021-23240 |
| Debian:14 | sudo | 1.9.5-1 | DEBIAN-CVE-2021-23240 |
| Rocky Linux:8 | sudo | 0:1.8.29-7.el8 | RLSA-2021:1723 |
Affected products (as reported)
References
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2021-23240 x_refsource_MISC
- https://www.sudo.ws/stable.html#1.9.5 x_refsource_CONFIRM
- FEDORA-2021-324479472c vendor-advisory, x_refsource_FEDORA
- FEDORA-2021-234d14bfcc vendor-advisory, x_refsource_FEDORA
- GLSA-202101-33 vendor-advisory, x_refsource_GENTOO
- https://security.netapp.com/advisory/ntap-20210129-0010/ x_refsource_CONFIRM
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 mailing-list, x_refsource_MLIST
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8 mailing-list, x_refsource_MLIST