Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Maplerayo

#23802de 53,632
10CVSS total
Vulnerabilidades · 1
PT-2017-2827
10
2017-07-07
Systemd · Systemd · CVE-2017-1000082
**Name of the Vulnerable Software and Affected Versions** systemd versions prior to v233 **Description** The issue arises from insufficient input validation in the systemd daemon's username parsing functionality, specifically when encountering usernames that start with a numeric digit. This can lead to a service being run with root privileges instead of the intended user. The problem can potentially be exploited by a remote attacker to gain elevated access. **Recommendations** For versions prior to v233, consider disabling services that use usernames starting with numeric digits until a patch is available. Restrict access to sensitive services to minimize the risk of exploitation. Avoid using usernames that start with numeric digits in the affected systemd versions.