In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 4.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-testsUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-pamUpgrade systemdUpgrade systemd-devel | May 4, 2022 | Apr 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade systemd-resolvedUpgrade systemd-develUpgrade systemd-networkdUpgrade systemd-libsUpgrade systemd-journal-gatewayUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-debuginfoUpgrade systemd | Oct 11, 2022 | Apr 9, 2019 |
| Centos_linux | — | Upgrade systemd-pam-debuginfoUpgrade systemd-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-libsUpgrade systemd-udev-debuginfoUpgrade systemd-containerUpgrade systemd-libs-debuginfoUpgrade systemd-testsUpgrade systemd-develUpgrade systemd-container-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-debugsourceUpgrade systemdUpgrade systemd-pam | Jun 1, 2021 | Apr 9, 2019 |
| Debian | — | Upgrade systemd | Apr 10, 2019 | Apr 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-pythonUpgrade systemd-sysvUpgrade systemdUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-devel | May 7, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libgudev1Upgrade libgudev1-develUpgrade systemd-develUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemdUpgrade systemd-libs | May 30, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-develUpgrade systemd-udev-compatUpgrade systemdUpgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-sysvUpgrade libgudev1-develUpgrade libgudev1 | Aug 16, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemd-udevUpgrade systemd-containerUpgrade systemdUpgrade systemd-journal-remote | Jun 27, 2019 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade systemd-containerUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-pamUpgrade systemdUpgrade systemd-udevUpgrade systemd-journal-remote | May 26, 2021 | Apr 8, 2019 |
| Redhat_linux | — | Upgrade systemd-pam-debuginfoUpgrade systemd-debuginfoUpgrade systemd-journal-remoteNo solution existsUpgrade systemd-container-debuginfoUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-udev-debuginfoUpgrade systemd-libsUpgrade systemd-journal-remote-debuginfoUpgrade systemd-develUpgrade systemd-libs-debuginfoUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-tests-debuginfoUpgrade systemd-debugsourceUpgrade systemd | May 21, 2021 | Apr 9, 2019 |
| Rocky_linux | — | Upgrade systemd-debugsourceUpgrade systemd-libsUpgrade systemd-udev-debuginfoUpgrade systemd-debuginfoUpgrade systemd-testsUpgrade systemd-pam-debuginfoUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-journal-remote-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfoUpgrade systemdUpgrade systemd-pamUpgrade systemd-libs-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-udev | Mar 12, 2024 | Apr 9, 2019 |
| Suse | — | Upgrade systemdUpgrade libudev1-32bitUpgrade systemd-docUpgrade systemd-langUpgrade systemd-coredumpUpgrade systemd-bash-completionUpgrade systemd-32bitUpgrade udevUpgrade systemd-journal-remoteUpgrade libsystemd0-32bitUpgrade systemd-sysvinitUpgrade libudev1Upgrade systemd-develUpgrade libudev-develUpgrade systemd-containerUpgrade libsystemd0 | May 16, 2019 | Apr 9, 2019 |
| Ubuntu | — | Upgrade libpam-systemd | Apr 17, 2019 | Apr 8, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub