PT-2017-2827 · Systemd+1 · Systemd+1
Maplerayo
·
Publicado
2017-07-07
·
Atualizado
2025-06-27
·
CVE-2017-1000082
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
systemd versions prior to v233
Description
The issue arises from insufficient input validation in the systemd daemon's username parsing functionality, specifically when encountering usernames that start with a numeric digit. This can lead to a service being run with root privileges instead of the intended user. The problem can potentially be exploited by a remote attacker to gain elevated access.
Recommendations
For versions prior to v233, consider disabling services that use usernames starting with numeric digits until a patch is available. Restrict access to sensitive services to minimize the risk of exploitation. Avoid using usernames that start with numeric digits in the affected systemd versions.
Correção
Improper Privilege Management
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Systemd