Количество 14
Количество 14
BDU:2019-01945
Уязвимость модуля pam_systemd демона systemd, связанная с некорректным использованием переменных окружения, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемых данных
ALT-PU-2019-1690
ALT-PU-2019-1690: package `systemd` update to version 242-alt1
CVE-2019-3842
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
CVE-2019-3842
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
CVE-2019-3842
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
CVE-2019-3842
CVE-2019-3842
In systemd before v242-rc4, it was discovered that pam_systemd does no ...
GHSA-c23j-qp89-q76c
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
RLSA-2021:1611
Moderate: systemd security, bug fix, and enhancement update
ELSA-2021-1611
ELSA-2021-1611: systemd security, bug fix, and enhancement update (MODERATE)
openSUSE-SU-2019:1450-1
Security update for systemd
SUSE-SU-2019:1265-1
Security update for systemd
SUSE-SU-2019:1364-2
Security update for systemd
SUSE-SU-2019:1364-1
Security update for systemd
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2019-01945 Уязвимость модуля pam_systemd демона systemd, связанная с некорректным использованием переменных окружения, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемых данных | CVSS3: 7 | 1% Низкий | почти 8 лет назад |
 | ALT-PU-2019-1690 ALT-PU-2019-1690: package `systemd` update to version 242-alt1 | CVSS3: 7.8 | больше 7 лет назад | |
 | CVE-2019-3842 In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any". | CVSS3: 7 | 1% Низкий | больше 7 лет назад |
 | CVE-2019-3842 In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any". | CVSS3: 4.5 | 1% Низкий | больше 7 лет назад |
| CVE-2019-3842 In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any". | CVSS3: 7 | 1% Низкий | больше 7 лет назад |
 | CVSS3: 7 | 1% Низкий | около 6 лет назад | |
| CVE-2019-3842 In systemd before v242-rc4, it was discovered that pam_systemd does no ... | CVSS3: 7 | 1% Низкий | больше 7 лет назад |
| GHSA-c23j-qp89-q76c In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any". | CVSS3: 7 | 1% Низкий | больше 4 лет назад |
 | RLSA-2021:1611 Moderate: systemd security, bug fix, and enhancement update | больше 5 лет назад | ||
| ELSA-2021-1611 ELSA-2021-1611: systemd security, bug fix, and enhancement update (MODERATE) | больше 5 лет назад | ||
 | openSUSE-SU-2019:1450-1 Security update for systemd | больше 7 лет назад | ||
| SUSE-SU-2019:1265-1 Security update for systemd | больше 7 лет назад | ||
| SUSE-SU-2019:1364-2 Security update for systemd | больше 7 лет назад | ||
| SUSE-SU-2019:1364-1 Security update for systemd | больше 7 лет назад |
Уязвимостей на страницу