CVE-2021-23240: fedoraproject fedora Link Following
Vulnerability summary
CVE-2021-23240 is a high (CVSS 7.8) Link Following vulnerability in fedoraproject fedora. EPSS estimates a 1.08% chance of exploitation in the next 30 days, higher than 64.5% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 8 · Related 6Timeline
- 12-01-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
1.08%
Chance of exploitation in the next 30 days
Percentile
65%
Versus all other CVEs
30-day change
+0.01 pp
From 1.07% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.suse.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Netapp2 products
Alpine1 product
- sudo≥ 1.9.0, < 1.9.5p2-r0 | ≥ 1.9.0, < 1.9.5-r0
Debian1 product
- sudo< 1.9.5-1
Fedoraproject1 product
- fedoraEOL32 | 33
Sudo_project1 product
- sudo< 1.8.32 | ≥ 1.9.0, < 1.9.5
Ubuntu1 product
- sudoAll versions (No fix recorded)
6 vendors · 7 products
References
15 links- bugzilla.suse.com/show_bug.cgi?id=CVE-2021-23240X Refsource MISCExploitIssue TrackingPatchThird Party Advisory
