Most recent entries from all

bdu:2022-05782

Withdrawn: BELL-CVE-2021-23239 — CVE-2021-23239 does not affect BellSoft software

Withdrawn by the publisher.

EUVD-2026-23361

fkie_cve-2021-23239

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.

GHSA-wfrc-r682-56qv

gsd-2021-23239

msrc_CVE-2021-23239 — The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existe…

msrc_CVE-2021-23239

OESA-2021-1002 — sudo security update

Affected: openEuler:20.03-LTS: sudo, openEuler:20.03-LTS-SP1: sudo

A flaw was found in sudo. A heap-based buffer overflow was found in the way sudo parses command line arguments. This flaw is exploitable by any local user (normal users and system users, sudoers and non-sudoers), without authentication (i.e., the attacker does not need to know the user's password). Successful exploitation of this flaw could lead to privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-3156)\r\n\r\n The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.(CVE-2021-23239)\r\n\r\n selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.(CVE-2021-23240)\r\n\r\n

openSUSE-SU-2021:0169-1 — Security update for sudo

Security update for sudo

SUSE-SU-2021:0225-1 — Security update for sudo

Security update for sudo

UBUNTU-CVE-2021-23239

Affected: Ubuntu:Pro:14.04:LTS: sudo, Ubuntu:16.04:LTS: sudo, Ubuntu:18.04:LTS: sudo, Ubuntu:20.04:LTS: sudo

WID-SEC-W-2025-0227 — IBM QRadar SIEM: Mehrere Schwachstellen

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.