The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."
CVSS Details
- CVSS 3.1 Base Score: 4.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade systemd | Jul 30, 2024 | Jul 12, 2012 |
| Suse | — | Upgrade systemd-32bitUpgrade libudev1Upgrade systemd-experimentalUpgrade systemdUpgrade systemd-develUpgrade systemd-docUpgrade systemd-sysvinitUpgrade systemd-bash-completionUpgrade systemd-journal-remoteUpgrade systemd-bootUpgrade udevUpgrade systemd-langUpgrade typelib-1_0-GUdev-1_0Upgrade libgudev-1_0-0Upgrade systemd-containerUpgrade libgudev-1_0-0-32bitUpgrade libgudev-1_0-develUpgrade libudev1-32bitUpgrade libsystemd0-32bitUpgrade systemd-coredumpUpgrade systemd-portableUpgrade systemd-homedUpgrade systemd-resolved | Dec 12, 2013 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub