In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 4.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-systemdalma-upgrade-systemd-containeralma-upgrade-systemd-develalma-upgrade-systemd-journal-remotealma-upgrade-systemd-libsalma-upgrade-systemd-pamalma-upgrade-systemd-testsalma-upgrade-systemd-udev | May 4, 2022 | Apr 9, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libgudev1amazon-linux-ami-2-upgrade-libgudev1-develamazon-linux-ami-2-upgrade-systemdamazon-linux-ami-2-upgrade-systemd-debuginfoamazon-linux-ami-2-upgrade-systemd-develamazon-linux-ami-2-upgrade-systemd-journal-gatewayamazon-linux-ami-2-upgrade-systemd-libsamazon-linux-ami-2-upgrade-systemd-networkdamazon-linux-ami-2-upgrade-systemd-pythonamazon-linux-ami-2-upgrade-systemd-resolvedamazon-linux-ami-2-upgrade-systemd-sysv | Oct 11, 2022 | Apr 9, 2019 | |
| Centos_linux | — | centos-upgrade-systemdcentos-upgrade-systemd-containercentos-upgrade-systemd-container-debuginfocentos-upgrade-systemd-debuginfocentos-upgrade-systemd-debugsourcecentos-upgrade-systemd-develcentos-upgrade-systemd-journal-remotecentos-upgrade-systemd-journal-remote-debuginfocentos-upgrade-systemd-libscentos-upgrade-systemd-libs-debuginfocentos-upgrade-systemd-pamcentos-upgrade-systemd-pam-debuginfocentos-upgrade-systemd-testscentos-upgrade-systemd-tests-debuginfocentos-upgrade-systemd-udevcentos-upgrade-systemd-udev-debuginfo | Jun 1, 2021 | Apr 9, 2019 |
| Debian | debian-upgrade-systemd | Apr 10, 2019 | Apr 10, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libgudev1huawei-euleros-2_0_sp2-upgrade-libgudev1-develhuawei-euleros-2_0_sp2-upgrade-systemdhuawei-euleros-2_0_sp2-upgrade-systemd-develhuawei-euleros-2_0_sp2-upgrade-systemd-libshuawei-euleros-2_0_sp2-upgrade-systemd-pythonhuawei-euleros-2_0_sp2-upgrade-systemd-sysv | May 7, 2019 | Apr 9, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libgudev1huawei-euleros-2_0_sp3-upgrade-libgudev1-develhuawei-euleros-2_0_sp3-upgrade-systemdhuawei-euleros-2_0_sp3-upgrade-systemd-develhuawei-euleros-2_0_sp3-upgrade-systemd-libshuawei-euleros-2_0_sp3-upgrade-systemd-pythonhuawei-euleros-2_0_sp3-upgrade-systemd-sysv | May 30, 2019 | Apr 9, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libgudev1huawei-euleros-2_0_sp5-upgrade-libgudev1-develhuawei-euleros-2_0_sp5-upgrade-systemdhuawei-euleros-2_0_sp5-upgrade-systemd-develhuawei-euleros-2_0_sp5-upgrade-systemd-libshuawei-euleros-2_0_sp5-upgrade-systemd-pythonhuawei-euleros-2_0_sp5-upgrade-systemd-sysvhuawei-euleros-2_0_sp5-upgrade-systemd-udev-compat | Aug 16, 2019 | Apr 9, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-systemdhuawei-euleros-2_0_sp8-upgrade-systemd-containerhuawei-euleros-2_0_sp8-upgrade-systemd-develhuawei-euleros-2_0_sp8-upgrade-systemd-journal-remotehuawei-euleros-2_0_sp8-upgrade-systemd-libshuawei-euleros-2_0_sp8-upgrade-systemd-pamhuawei-euleros-2_0_sp8-upgrade-systemd-udevhuawei-euleros-2_0_sp8-upgrade-systemd-udev-compat | Jun 27, 2019 | Apr 9, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-systemdoracle-linux-upgrade-systemd-containeroracle-linux-upgrade-systemd-develoracle-linux-upgrade-systemd-journal-remoteoracle-linux-upgrade-systemd-libsoracle-linux-upgrade-systemd-pamoracle-linux-upgrade-systemd-testsoracle-linux-upgrade-systemd-udev | May 26, 2021 | Apr 8, 2019 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-systemdredhat-upgrade-systemd-containerredhat-upgrade-systemd-container-debuginforedhat-upgrade-systemd-debuginforedhat-upgrade-systemd-debugsourceredhat-upgrade-systemd-develredhat-upgrade-systemd-journal-remoteredhat-upgrade-systemd-journal-remote-debuginforedhat-upgrade-systemd-libsredhat-upgrade-systemd-libs-debuginforedhat-upgrade-systemd-pamredhat-upgrade-systemd-pam-debuginforedhat-upgrade-systemd-testsredhat-upgrade-systemd-tests-debuginforedhat-upgrade-systemd-udevredhat-upgrade-systemd-udev-debuginfo | May 21, 2021 | Apr 9, 2019 | |
| Rocky_linux | rocky-upgrade-systemdrocky-upgrade-systemd-containerrocky-upgrade-systemd-container-debuginforocky-upgrade-systemd-debuginforocky-upgrade-systemd-debugsourcerocky-upgrade-systemd-develrocky-upgrade-systemd-journal-remoterocky-upgrade-systemd-journal-remote-debuginforocky-upgrade-systemd-libsrocky-upgrade-systemd-libs-debuginforocky-upgrade-systemd-pamrocky-upgrade-systemd-pam-debuginforocky-upgrade-systemd-testsrocky-upgrade-systemd-tests-debuginforocky-upgrade-systemd-udevrocky-upgrade-systemd-udev-debuginfo | Mar 12, 2024 | Apr 9, 2019 | |
| Suse | — | suse-upgrade-libsystemd0suse-upgrade-libsystemd0-32bitsuse-upgrade-libudev-develsuse-upgrade-libudev1suse-upgrade-libudev1-32bitsuse-upgrade-systemdsuse-upgrade-systemd-32bitsuse-upgrade-systemd-bash-completionsuse-upgrade-systemd-containersuse-upgrade-systemd-coredumpsuse-upgrade-systemd-develsuse-upgrade-systemd-docsuse-upgrade-systemd-journal-remotesuse-upgrade-systemd-langsuse-upgrade-systemd-sysvinitsuse-upgrade-udev | May 16, 2019 | Apr 9, 2019 |
| Ubuntu | ubuntu-upgrade-libpam-systemd | Apr 17, 2019 | Apr 8, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub