CVE-2018-15687

Опубликовано: 26 окт. 2018

Источник: nvd

CVSS3: 7.8

CVSS3: 7

CVSS2: 6.9

EPSS Низкий

Описание

A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.

Ссылки

http://www.securityfocus.com/bid/105748
Broken Link
Third Party Advisory
VDB Entry
https://github.com/systemd/systemd/pull/10517/commits
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201810-10
Third Party Advisory
https://usn.ubuntu.com/3816-1/
Third Party Advisory
https://www.exploit-db.com/exploits/45715/
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/105748
Broken Link
Third Party Advisory
VDB Entry
https://github.com/systemd/systemd/pull/10517/commits
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201810-10
Third Party Advisory
https://usn.ubuntu.com/3816-1/
Third Party Advisory
https://www.exploit-db.com/exploits/45715/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*

Версия от 235 (включая) до 240 (исключая)

EPSS

Процентиль: 56%

0.00345

Низкий

7.8 High

CVSS3

7 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVE-2018-15687

CVSS3: 7

ubuntu

почти 7 лет назад

A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.

CVE-2018-15687

CVSS3: 6.3

redhat

почти 7 лет назад

A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.

CVE-2018-15687

CVSS3: 7

msrc

около 5 лет назад

Описание отсутствует

CVE-2018-15687

CVSS3: 7

debian

почти 7 лет назад

A race condition in chown_one() of systemd allows an attacker to cause ...

GHSA-wxcv-623q-99fj

CVSS3: 7

github

больше 3 лет назад

A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.

EPSS

Процентиль: 56%

0.00345

Низкий

7.8 High

CVSS3

7 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-362