The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sudo | May 4, 2022 | Jan 12, 2021 |
| Alpine Linux | — | Upgrade sudo | Aug 22, 2024 | Jan 12, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 12, 2021 |
| Centos_linux | — | Upgrade sudo-debugsourceUpgrade sudo-debuginfoUpgrade sudo | Jun 1, 2021 | Jan 12, 2021 |
| Debian | — | Upgrade sudo | Nov 9, 2022 | Jan 12, 2021 |
| Freebsd | — | Upgrade sudo | Jan 12, 2021 | Jan 11, 2021 |
| Gentoo Linux | — | Upgrade app-admin/sudo. | Jan 27, 2021 | Jan 12, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sudo | Feb 24, 2022 | Jan 12, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sudo | Mar 24, 2021 | Jan 12, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sudo | Feb 2, 2021 | Jan 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sudo | Feb 8, 2021 | Jan 12, 2021 |
| Oracle_linux | — | Upgrade sudo | May 26, 2021 | Jan 11, 2021 |
| Redhat_linux | — | No solution existsUpgrade sudoUpgrade sudo-debugsourceUpgrade sudo-debuginfo | May 21, 2021 | Jan 12, 2021 |
| Rocky_linux | — | Upgrade sudo-debuginfoUpgrade sudo-debugsourceUpgrade sudo | Mar 12, 2024 | Jan 12, 2021 |
| Suse | — | Upgrade sudoUpgrade sudo-plugin-pythonUpgrade sudo-develUpgrade sudo-test | Jan 28, 2021 | Jan 11, 2021 |
| Ubuntu | — | Upgrade sudo-ldapUpgrade sudo | Jan 27, 2021 | Jan 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub