CVE-2021-23240

selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.

• CWE-59

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2021-23240Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE42Y35SMJOLONAIBNYNFC7J44UUZ2Y6/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMY4VSSBIND7VAYSN6T7XIWJRWG4GBB3/
• https://security.gentoo.org/glsa/202101-33Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210129-0010/Third Party Advisory
• https://www.sudo.ws/stable.html#1.9.5Release Notes, Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2021-23240Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE42Y35SMJOLONAIBNYNFC7J44UUZ2Y6/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMY4VSSBIND7VAYSN6T7XIWJRWG4GBB3/
• https://security.gentoo.org/glsa/202101-33Third Party Advisory
• https://security.netapp.com/advisory/ntap-20210129-0010/Third Party Advisory
• https://www.sudo.ws/stable.html#1.9.5Release Notes, Vendor Advisory

Published

Jan 12, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-23230A SQL Injection vulnerability in the OPCUA interface of Gall…4.3
• CVE-2021-23232Rejected reason: This candidate was in a CNA pool that was n…
• CVE-2021-23233Sensitive endpoints in Fresenius Kabi Agilia Link+ v3.0 and …9.8
• CVE-2021-23236Requests may be used to interrupt the normal operation of th…7.5
• CVE-2021-23239The sudoedit personality of Sudo before 1.9.5 may allow a lo…2.5
• CVE-2021-2324Vulnerability in the Oracle FLEXCUBE Universal Banking produ…4.6
• CVE-2021-23241MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversa…5.3
• CVE-2021-23242MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversa…5.3
• CVE-2021-23243In Oppo's battery application, the third-party SDK provides …7.8
• CVE-2021-23244ColorOS pregrant dangerous permissions to apps which are lis…7.8
• CVE-2021-23246In ACE2 ColorOS11, the attacker can obtain the foreground pa…7.5
• CVE-2021-23247A command injection vulerability found in quick game engine …9.8