The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-sudo | May 4, 2022 | Jan 12, 2021 | |
| Alpine Linux | alpine-linux-upgrade-sudo | Aug 22, 2024 | Jan 12, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 12, 2021 | |
| Centos_linux | — | centos-upgrade-sudocentos-upgrade-sudo-debuginfocentos-upgrade-sudo-debugsource | Jun 1, 2021 | Jan 12, 2021 |
| Debian | debian-upgrade-sudo | Nov 9, 2022 | Jan 12, 2021 | |
| Freebsd | freebsd-upgrade-package-sudo | Jan 12, 2021 | Jan 11, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-app-admin-sudo | Jan 27, 2021 | Jan 12, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-sudo | Feb 24, 2022 | Jan 12, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-sudo | Mar 24, 2021 | Jan 12, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-sudo | Feb 2, 2021 | Jan 12, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-sudo | Feb 8, 2021 | Jan 12, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-sudo | May 26, 2021 | Jan 11, 2021 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-sudoredhat-upgrade-sudo-debuginforedhat-upgrade-sudo-debugsource | May 21, 2021 | Jan 12, 2021 | |
| Rocky_linux | rocky-upgrade-sudorocky-upgrade-sudo-debuginforocky-upgrade-sudo-debugsource | Mar 12, 2024 | Jan 12, 2021 | |
| Suse | — | suse-upgrade-sudosuse-upgrade-sudo-develsuse-upgrade-sudo-plugin-pythonsuse-upgrade-sudo-test | Jan 28, 2021 | Jan 11, 2021 |
| Ubuntu | ubuntu-upgrade-sudoubuntu-upgrade-sudo-ldap | Jan 27, 2021 | Jan 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub