vulnerability
Rocky Linux: CVE-2019-3842: systemd (RLSA-2021-1611)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:L/AC:M/Au:N/C:P/I:P/A:P) | Apr 9, 2019 | Mar 12, 2024 | Aug 13, 2025 |
Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
Apr 9, 2019
Added
Mar 12, 2024
Modified
Aug 13, 2025
Description
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
Solutions
rocky-upgrade-systemdrocky-upgrade-systemd-containerrocky-upgrade-systemd-container-debuginforocky-upgrade-systemd-debuginforocky-upgrade-systemd-debugsourcerocky-upgrade-systemd-develrocky-upgrade-systemd-journal-remoterocky-upgrade-systemd-journal-remote-debuginforocky-upgrade-systemd-libsrocky-upgrade-systemd-libs-debuginforocky-upgrade-systemd-pamrocky-upgrade-systemd-pam-debuginforocky-upgrade-systemd-testsrocky-upgrade-systemd-tests-debuginforocky-upgrade-systemd-udevrocky-upgrade-systemd-udev-debuginfo
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.