In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 4.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-journal-remoteUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd | May 4, 2022 | Apr 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade systemd-libsUpgrade systemd-sysvUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-develUpgrade systemd-journal-gatewayUpgrade systemd-debuginfoUpgrade libgudev1-develUpgrade libgudev1Upgrade systemdUpgrade systemd-python | Oct 11, 2022 | Apr 9, 2019 |
| Centos_linux | — | Upgrade systemd-pam-debuginfoUpgrade systemd-testsUpgrade systemd-libs-debuginfoUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-udev-debuginfoUpgrade systemd-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-tests-debuginfoUpgrade systemd-pamUpgrade systemdUpgrade systemd-container-debuginfoUpgrade systemd-debugsource | Jun 1, 2021 | Apr 9, 2019 |
| Debian | — | Upgrade systemd | Apr 10, 2019 | Apr 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-develUpgrade systemd-libsUpgrade systemd-sysvUpgrade libgudev1-develUpgrade libgudev1Upgrade systemdUpgrade systemd-python | May 7, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemdUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-pythonUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-devel | May 30, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libgudev1Upgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-develUpgrade systemdUpgrade systemd-udev-compat | Aug 16, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-containerUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-journal-remote | Jun 27, 2019 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade systemd-pamUpgrade systemd-testsUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-container | May 26, 2021 | Apr 8, 2019 |
| Redhat_linux | — | No solution existsUpgrade systemd-pam-debuginfoUpgrade systemd-testsUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfoUpgrade systemd-debuginfoUpgrade systemd-udevUpgrade systemd-develUpgrade systemd-udev-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-debugsourceUpgrade systemd-containerUpgrade systemd-tests-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemdUpgrade systemd-pamUpgrade systemd-libs | May 21, 2021 | Apr 9, 2019 |
| Rocky_linux | — | Upgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-journal-remote-debuginfoUpgrade systemd-udevUpgrade systemdUpgrade systemd-container-debuginfoUpgrade systemd-develUpgrade systemd-libs-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-libsUpgrade systemd-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-debugsourceUpgrade systemd-testsUpgrade systemd-containerUpgrade systemd-pam-debuginfo | Mar 12, 2024 | Apr 9, 2019 |
| Suse | — | Upgrade systemd-bash-completionUpgrade libudev1Upgrade systemd-containerUpgrade systemd-sysvinitUpgrade systemd-coredumpUpgrade libsystemd0Upgrade libsystemd0-32bitUpgrade systemd-32bitUpgrade systemd-develUpgrade systemd-journal-remoteUpgrade libudev-develUpgrade udevUpgrade systemd-langUpgrade libudev1-32bitUpgrade systemd-docUpgrade systemd | May 16, 2019 | Apr 9, 2019 |
| Ubuntu | — | Upgrade libpam-systemd | Apr 17, 2019 | Apr 8, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub