In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 4.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-develUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-libsUpgrade systemdUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-journal-remote | May 4, 2022 | Apr 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade systemd-journal-gatewayUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-sysvUpgrade systemd-develUpgrade libgudev1-develUpgrade systemdUpgrade libgudev1Upgrade systemd-debuginfoUpgrade systemd-python | Oct 11, 2022 | Apr 9, 2019 |
| Centos_linux | — | Upgrade systemd-journal-remoteUpgrade systemd-debugsourceUpgrade systemd-udevUpgrade systemd-container-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-pamUpgrade systemdUpgrade systemd-testsUpgrade systemd-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-devel | Jun 1, 2021 | Apr 9, 2019 |
| Debian | — | Upgrade systemd | Apr 10, 2019 | Apr 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-develUpgrade systemd-libsUpgrade systemdUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-pythonUpgrade libgudev1 | May 7, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemdUpgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-develUpgrade systemd-pythonUpgrade libgudev1 | May 30, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-sysvUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-pythonUpgrade systemdUpgrade systemd-develUpgrade systemd-udev-compat | Aug 16, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-containerUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-pam | Jun 27, 2019 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade systemd-containerUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemd-pamUpgrade systemd-testsUpgrade systemd | May 26, 2021 | Apr 8, 2019 |
| Redhat_linux | — | Upgrade systemdUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-libs-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-debugsourceUpgrade systemd-develUpgrade systemd-containerUpgrade systemd-journal-remote-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-journal-remoteNo solution existsUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-debuginfoUpgrade systemd-container-debuginfo | May 21, 2021 | Apr 9, 2019 |
| Rocky_linux | — | Upgrade systemd-container-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-pamUpgrade systemd-develUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-containerUpgrade systemd-pam-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-debugsourceUpgrade systemd-testsUpgrade systemd-debuginfoUpgrade systemd-libs | Mar 12, 2024 | Apr 9, 2019 |
| Suse | — | Upgrade systemd-docUpgrade systemd-langUpgrade libudev1-32bitUpgrade systemdUpgrade systemd-bash-completionUpgrade systemd-containerUpgrade systemd-sysvinitUpgrade systemd-coredumpUpgrade libudev1Upgrade systemd-develUpgrade udevUpgrade libudev-develUpgrade systemd-32bitUpgrade systemd-journal-remoteUpgrade libsystemd0-32bitUpgrade libsystemd0 | May 16, 2019 | Apr 9, 2019 |
| Ubuntu | — | Upgrade libpam-systemd | Apr 17, 2019 | Apr 8, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub