systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-testsUpgrade systemd-udevUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-libs | May 4, 2022 | Jun 3, 2020 |
| Amazon Linux Ami 2 | — | Upgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade systemd-debuginfoUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemdUpgrade libgudev1Upgrade systemd-libsUpgrade systemd-pythonUpgrade systemd-devel | Oct 11, 2022 | Jun 3, 2020 |
| Centos_linux | — | Upgrade systemd-tests-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-pamUpgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemd-pam-debuginfoUpgrade systemd-debugsourceUpgrade systemd-udev-debuginfoUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-containerUpgrade systemd-libs-debuginfoUpgrade systemd-udevUpgrade systemd-container-debuginfo | Jun 1, 2021 | Jun 3, 2020 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Jun 3, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-libsUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-containerUpgrade systemdUpgrade systemd-develUpgrade systemd-udev-compatUpgrade systemd-udev | Feb 2, 2021 | Jun 3, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-udevUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemd-libs | Feb 8, 2021 | Jun 3, 2020 |
| Oracle_linux | — | Upgrade systemd-containerUpgrade systemd-udevUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-devel | May 26, 2021 | May 31, 2020 |
| Redhat_linux | — | Upgrade systemd-debugsourceUpgrade systemd-pamUpgrade systemd-pam-debuginfoUpgrade systemd-develNo solution existsUpgrade systemdUpgrade systemd-journal-remote-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-libsUpgrade systemd-libs-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-udev-debuginfoUpgrade systemd-testsUpgrade systemd-debuginfo | May 21, 2021 | Jun 3, 2020 |
| Rocky_linux | — | Upgrade systemd-debugsourceUpgrade systemd-pamUpgrade systemd-tests-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-journal-remote-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-udevUpgrade systemdUpgrade systemd-journal-remote | Mar 12, 2024 | Jun 3, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub