In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 4.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-libsUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-develUpgrade systemdUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-tests | May 4, 2022 | Apr 9, 2019 |
| Amazon Linux Ami 2 | — | Upgrade systemd-pythonUpgrade libgudev1-develUpgrade systemdUpgrade systemd-debuginfoUpgrade libgudev1Upgrade systemd-networkdUpgrade systemd-sysvUpgrade systemd-develUpgrade systemd-journal-gatewayUpgrade systemd-libsUpgrade systemd-resolved | Oct 11, 2022 | Apr 9, 2019 |
| Centos_linux | — | Upgrade systemd-testsUpgrade systemd-develUpgrade systemd-pam-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-libs-debuginfoUpgrade systemdUpgrade systemd-pamUpgrade systemd-tests-debuginfoUpgrade systemd-debugsourceUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfo | Jun 1, 2021 | Apr 9, 2019 |
| Debian | — | Upgrade systemd | Apr 10, 2019 | Apr 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade libgudev1Upgrade systemd-pythonUpgrade systemdUpgrade libgudev1-develUpgrade systemd-sysv | May 7, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemdUpgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-sysvUpgrade libgudev1Upgrade systemd-pythonUpgrade systemd-devel | May 30, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-pythonUpgrade libgudev1Upgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-udev-compatUpgrade systemdUpgrade systemd-devel | Aug 16, 2019 | Apr 9, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-develUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd | Jun 27, 2019 | Apr 9, 2019 |
| Oracle_linux | — | Upgrade systemd-libsUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-testsUpgrade systemd-pamUpgrade systemdUpgrade systemd-udevUpgrade systemd-journal-remote | May 26, 2021 | Apr 8, 2019 |
| Redhat_linux | — | Upgrade systemd-udev-debuginfoUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-journal-remote-debuginfoUpgrade systemdUpgrade systemd-containerUpgrade systemd-tests-debuginfoUpgrade systemd-develUpgrade systemd-libs-debuginfoUpgrade systemd-debugsourceUpgrade systemd-udevUpgrade systemd-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-pam-debuginfoUpgrade systemd-testsNo solution existsUpgrade systemd-container-debuginfo | May 21, 2021 | Apr 9, 2019 |
| Rocky_linux | — | Upgrade systemd-develUpgrade systemd-pamUpgrade systemd-journal-remote-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-udevUpgrade systemdUpgrade systemd-container-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-pam-debuginfoUpgrade systemd-debugsourceUpgrade systemd-testsUpgrade systemd-libsUpgrade systemd-debuginfoUpgrade systemd-containerUpgrade systemd-udev-debuginfo | Mar 12, 2024 | Apr 9, 2019 |
| Suse | — | Upgrade systemd-develUpgrade libudev1Upgrade systemd-bash-completionUpgrade systemd-containerUpgrade libudev-develUpgrade systemd-sysvinitUpgrade systemd-32bitUpgrade libsystemd0-32bitUpgrade libsystemd0Upgrade udevUpgrade systemd-coredumpUpgrade systemd-journal-remoteUpgrade systemd-docUpgrade systemd-langUpgrade systemdUpgrade libudev1-32bit | May 16, 2019 | Apr 9, 2019 |
| Ubuntu | — | Upgrade libpam-systemd | Apr 17, 2019 | Apr 8, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub