VDB
GCVE-VVD-MAGEIA-2021-42
GCVE-VVD-MAGEIA-2021-42
Advisory Published
The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged
user to perform arbitrary directory-existence tests by winning a sudo_edit.c
race condition in replacing a user-controlled directory by a symlink to an
arbitrary path. (CVE-2021-23239).
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local
unprivileged user to gain file ownership and escalate privileges by replacing
a temporary file with a symlink to an arbitrary file target. This affects
SELinux RBAC support in permissive mode. Machines without SELinux are not
vulnerable. (CVE-2021-23240).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | vnstat | 0 (affected), 2.6-1.1.mga8 (unaffected) | — |
| Mageia | sudo | 0 (affected), 1.9.5-1.mga7 (unaffected), 0 (affected), 1.9.5-1.mga7 (unaffected) | — |
References
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.