ALT-PU-2016-1214

Высокий

ALT-PU-2016-1214: package systemd update to version 229-alt1

Источник

errata.altlinux.org

Дата публикации

11.03.2016

Дата обновления

11.03.2016

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades systemd to version 229-alt1.

Устраненные уязвимости1

CVE-2016-10156

Высокий 7.8

Дата публикации: 23.01.2017

CWE-264

A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.

CVSS 3.0

Высокий 7.8

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector: Local
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Высокий 7.2

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access vector: Local
Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Ссылки

CVE-2016-10156 https://nvd.nist.gov/vuln/detail/CVE-2016-10156

Ссылки1

ALT-PU-2016-1214 https://errata.altlinux.org/ALT-PU-2016-1214

Связанные уязвимости

CVE-2016-10156

CVSS3: 7.8

ubuntu

почти 10 лет назад

CVE-2016-10156

CVSS3: 7.8

redhat

почти 10 лет назад

CVE-2016-10156

CVSS3: 7.8

nvd

почти 10 лет назад

CVE-2016-10156

CVSS3: 7.8

debian

почти 10 лет назад

A flaw in systemd v228 in /src/basic/fs-util.c caused world writable s ...

openSUSE-SU-2017:0287-1

suse-cvrf

почти 10 лет назад

Security update for systemd