PT-2017-2827 · Systemd+1 · Systemd+1

Maplerayo · Published 2017-07-07 · Updated 2025-06-27 · CVE-2017-1000082

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions systemd versions prior to v233

Description The issue arises from insufficient input validation in the systemd daemon's username parsing functionality, specifically when encountering usernames that start with a numeric digit. This can lead to a service being run with root privileges instead of the intended user. The problem can potentially be exploited by a remote attacker to gain elevated access.

Recommendations For versions prior to v233, consider disabling services that use usernames starting with numeric digits until a patch is available. Restrict access to sensitive services to minimize the risk of exploitation. Avoid using usernames that start with numeric digits in the affected systemd versions.

Fix

Improper Privilege Management

RCE

Weakness Enumeration

CWE-269

CWE-20

Related Identifiers

ALT-PU-2017-1893

BDU:2017-02107

CVE-2017-1000082

Affected Products

Alt Linux

Systemd

References · 26

• https://github.com/systemd/systemd/issues/6237 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000082 · Security Note
• https://bdu.fstec.ru/vul/2019-01640 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000082 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1000082 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1049 · Security Note
• https://cve.org/CVERecord?id=CVE-2017-1000082 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9217 · Security Note
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20211019SE81 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-1000082 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02107 · Security Note
• http://openwall.com/lists/oss-security/2017/07/02/1 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445 · Security Note
• https://ubuntu.com/security/CVE-2017-1000082 · Vendor Advisory