PT-2019-2179 · Systemd+6 · Systemd+6

Published 2019-01-23 · Updated 2024-06-15 · CVE-2019-3842

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions systemd versions prior to v242-rc4

Description The issue is related to the pam systemd module of the systemd daemon, which fails to properly sanitize the environment before using the XDG SEAT variable. This could allow an attacker, in certain configurations, to set the XDG SEAT environment variable and check commands against polkit policies using the "allow active" element instead of "allow any", potentially impacting the confidentiality, integrity, and availability of protected data.

Recommendations For versions prior to v242-rc4, update to version v242-rc4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the XDG SEAT variable in the pam systemd module to minimize the risk of exploitation.

Exploit

Fix

Incorrect Authorization

Improper Authorization

Weakness Enumeration

CWE-264

CWE-863

CWE-285

Related Identifiers

ALT-PU-2019-1690

BDU:2019-01945

CESA-2021_1611

CVE-2019-3842

DLA-1762-1

DSA-4428-1

OPENSUSE-SU-2019_1450-1

OPENSUSE-SU-2024:11420-1

RHSA-2021:1611

RHSA-2021:3900

RHSA-2021_1611

RLSA-2021:1611

SUSE-SU-2019:1265-1

SUSE-SU-2019:1364-1

SUSE-SU-2019:1364-2

SUSE-SU-2019_1364-1

SUSE-SU-2019_1364-2

USN-3938-1

Affected Products

Alt Linux

Centos

Red Hat

Rocky Linux

Suse

Ubuntu

Systemd

References · 125

• 🔥 https://exploit-db.com/exploits/46743 · Exploit
• 🔥 http://packetstormsecurity.com/files/152610/systemd-Seat-Verification-Active-Session-Spoofing.html · Exploit
• https://errata.rockylinux.org/RLSA-2021:1611 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3842 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-3842 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-3842 · Security Note
• https://bdu.fstec.ru/vul/2019-02469 · Security Note
• https://security-tracker.debian.org/tracker/DLA-1762-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STR36RJE4ZZIORMDXRERVBHMPRNRTHAC · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-3842 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04524 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3842 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11420-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-3842 · Vendor Advisory