Описание
It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 237-3ubuntu10.38 |
| cosmic | ignored | end of life |
| devel | not-affected | 244.1-0ubuntu2 |
| disco | ignored | end of life |
| eoan | not-affected | 242-7ubuntu3.2 |
| esm-infra-legacy/trusty | not-affected | code not present |
| esm-infra/bionic | released | 237-3ubuntu10.38 |
| esm-infra/xenial | not-affected | code not present |
| precise/esm | DNE | |
| trusty/esm | not-affected | code not present |
Показывать по
EPSS
4.6 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.
It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.
It was discovered that a systemd service that uses DynamicUser propert ...
It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.
EPSS
4.6 Medium
CVSS2
7.8 High
CVSS3