The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade systemd | Jul 30, 2024 | Jul 12, 2012 |
| Suse | — | Upgrade systemd-resolvedUpgrade libudev1-32bitUpgrade libsystemd0Upgrade systemd-coredumpUpgrade libudev-develUpgrade systemd-portableUpgrade systemd-homedUpgrade libsystemd0-32bitUpgrade libgudev-1_0-develUpgrade systemd-32bitUpgrade systemd-journal-remoteUpgrade systemd-sysvinitUpgrade libgudev-1_0-0-32bitUpgrade typelib-1_0-GUdev-1_0Upgrade systemdUpgrade systemd-docUpgrade systemd-develUpgrade systemd-bootUpgrade systemd-containerUpgrade systemd-experimentalUpgrade systemd-langUpgrade udevUpgrade libgudev-1_0-0Upgrade systemd-bash-completionUpgrade libudev1 | Dec 12, 2013 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub