systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-testsUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-devel | May 4, 2022 | Jun 3, 2020 |
| Amazon Linux Ami 2 | — | Upgrade systemd-journal-gatewayUpgrade libgudev1-develUpgrade systemd-debuginfoUpgrade systemd-sysvUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemdUpgrade libgudev1Upgrade systemd-develUpgrade systemd-libsUpgrade systemd-python | Oct 11, 2022 | Jun 3, 2020 |
| Centos_linux | — | Upgrade systemdUpgrade systemd-libs-debuginfoUpgrade systemd-debuginfoUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-udev-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemd-pam-debuginfoUpgrade systemd-debugsourceUpgrade systemd-pamUpgrade systemd-journal-remote-debuginfo | Jun 1, 2021 | Jun 3, 2020 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Jun 3, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-pamUpgrade systemd-libsUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-containerUpgrade systemd-udev-compatUpgrade systemdUpgrade systemd-devel | Feb 2, 2021 | Jun 3, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-containerUpgrade systemd-libsUpgrade systemdUpgrade systemd-udevUpgrade systemd-udev-compat | Feb 8, 2021 | Jun 3, 2020 |
| Oracle_linux | — | Upgrade systemd-testsUpgrade systemd-udevUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-devel | May 26, 2021 | May 31, 2020 |
| Redhat_linux | — | Upgrade systemd-pamUpgrade systemd-pam-debuginfoUpgrade systemd-debugsourceUpgrade systemd-develNo solution existsUpgrade systemd-debuginfoUpgrade systemd-containerUpgrade systemd-journal-remote-debuginfoUpgrade systemd-testsUpgrade systemd-libs-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-libsUpgrade systemd-container-debuginfoUpgrade systemd-udev | May 21, 2021 | Jun 3, 2020 |
| Rocky_linux | — | Upgrade systemd-udev-debuginfoUpgrade systemd-container-debuginfoUpgrade systemdUpgrade systemd-udevUpgrade systemd-testsUpgrade systemd-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-libsUpgrade systemd-journal-remote-debuginfoUpgrade systemd-develUpgrade systemd-tests-debuginfoUpgrade systemd-pamUpgrade systemd-libs-debuginfoUpgrade systemd-debugsourceUpgrade systemd-containerUpgrade systemd-pam-debuginfo | Mar 12, 2024 | Jun 3, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub