GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
oesa-2021-1002
Vulnerability from osv_openeuler
Published
2021-01-28 11:04
Modified
2026-08-06 11:04
Summary
sudo security update
Details

A flaw was found in sudo. A heap-based buffer overflow was found in the way sudo parses command line arguments. This flaw is exploitable by any local user (normal users and system users, sudoers and non-sudoers), without authentication (i.e., the attacker does not need to know the user's password). Successful exploitation of this flaw could lead to privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-3156)\r\n\r\n The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.(CVE-2021-23239)\r\n\r\n selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.(CVE-2021-23240)\r\n\r\n

Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
To clipboard 

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "sudo-1.9.2-2.oe1.aarch64.rpm",
          "sudo-debuginfo-1.9.2-2.oe1.aarch64.rpm",
          "sudo-debugsource-1.9.2-2.oe1.aarch64.rpm",
          "sudo-devel-1.9.2-2.oe1.aarch64.rpm",
          "sudo-help-1.9.2-2.oe1.noarch.rpm",
          "sudo-1.9.2-3.oe1.aarch64.rpm",
          "sudo-debuginfo-1.9.2-3.oe1.aarch64.rpm",
          "sudo-debugsource-1.9.2-3.oe1.aarch64.rpm",
          "sudo-devel-1.9.2-3.oe1.aarch64.rpm",
          "sudo-help-1.9.2-3.oe1.noarch.rpm"
        ],
        "src": [
          "sudo-1.9.2-2.oe1.src.rpm",
          "sudo-1.9.2-3.oe1.src.rpm"
        ],
        "x86_64": [
          "sudo-1.9.2-2.oe1.x86_64.rpm",
          "sudo-debuginfo-1.9.2-2.oe1.x86_64.rpm",
          "sudo-debugsource-1.9.2-2.oe1.x86_64.rpm",
          "sudo-devel-1.9.2-2.oe1.x86_64.rpm",
          "sudo-help-1.9.2-2.oe1.noarch.rpm",
          "sudo-1.9.2-3.oe1.x86_64.rpm",
          "sudo-debuginfo-1.9.2-3.oe1.x86_64.rpm",
          "sudo-debugsource-1.9.2-3.oe1.x86_64.rpm",
          "sudo-devel-1.9.2-3.oe1.x86_64.rpm",
          "sudo-help-1.9.2-3.oe1.noarch.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS",
        "name": "sudo",
        "purl": "pkg:rpm/openEuler/sudo\u0026distro=openEuler-20.03-LTS"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.2-3.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "sudo-1.9.2-3.oe1.aarch64.rpm",
          "sudo-debuginfo-1.9.2-3.oe1.aarch64.rpm",
          "sudo-debugsource-1.9.2-3.oe1.aarch64.rpm",
          "sudo-devel-1.9.2-3.oe1.aarch64.rpm",
          "sudo-help-1.9.2-3.oe1.noarch.rpm"
        ],
        "src": [
          "sudo-1.9.2-3.oe1.src.rpm"
        ],
        "x86_64": [
          "sudo-1.9.2-3.oe1.x86_64.rpm",
          "sudo-debuginfo-1.9.2-3.oe1.x86_64.rpm",
          "sudo-debugsource-1.9.2-3.oe1.x86_64.rpm",
          "sudo-devel-1.9.2-3.oe1.x86_64.rpm",
          "sudo-help-1.9.2-3.oe1.noarch.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP1",
        "name": "sudo",
        "purl": "pkg:rpm/openEuler/sudo\u0026distro=openEuler-20.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.2-3.oe1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "A flaw was found in sudo. A heap-based buffer overflow was found in the way sudo parses command line arguments. This flaw is exploitable by any local user (normal users and system users, sudoers and non-sudoers), without authentication (i.e., the attacker does not need to know the user\u0027s password). Successful exploitation of this flaw could lead to privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-3156)\\r\\n\\r\\n\nThe sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.(CVE-2021-23239)\\r\\n\\r\\n\nselinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.(CVE-2021-23240)\\r\\n\\r\\n\n",
  "id": "OESA-2021-1002",
  "modified": "2026-08-06T11:04:13Z",
  "published": "2021-01-28T11:04:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1002"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3156"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23239"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23240"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "sudo security update",
  "upstream": [
    "CVE-2021-3156",
    "CVE-2021-23239",
    "CVE-2021-23240"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.