SUSE-SU-2021:0227-1: sudo&distro=SUSE Enterprise Storage 6 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2021:0227-1 is a vulnerability in sudo&distro=SUSE Enterprise Storage 6 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 26-01-2021PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for sudo This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit` [bsc#1180684,CVE-2021-23239] - A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240] - It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse15 products
- sudo&distro=SUSE Enterprise Storage 6< 1.8.22-4.15.1
- sudo&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 1.8.22-4.15.1
- sudo&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 1.8.22-4.15.1
- sudo&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 1.8.22-4.15.1
- sudo&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS< 1.8.22-4.15.1
1 vendor · 15 products