Логотип exploitDog
bind:"GHSA-8989-8fhv-vq42" OR bind:"CVE-2023-26604"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-8989-8fhv-vq42" OR bind:"CVE-2023-26604"

Количество 14

Количество 14

github логотип

GHSA-8989-8fhv-vq42

больше 2 лет назад

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
EPSS: Низкий
ubuntu логотип

CVE-2023-26604

больше 2 лет назад

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2023-26604

больше 2 лет назад

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 6.3
EPSS: Низкий
nvd логотип

CVE-2023-26604

больше 2 лет назад

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
EPSS: Низкий
msrc логотип

CVE-2023-26604

больше 2 лет назад

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2023-26604

больше 2 лет назад

systemd before 247 does not adequately block local privilege escalatio ...

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:1622-1

больше 2 лет назад

Security update for systemd

EPSS: Низкий
rocky логотип

RLSA-2023:3837

почти 2 года назад

Moderate: systemd security and bug fix update

EPSS: Низкий
oracle-oval логотип

ELSA-2024-7705

10 месяцев назад

ELSA-2024-7705: systemd security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2023-3837

около 2 лет назад

ELSA-2023-3837: systemd security and bug fix update (MODERATE)

EPSS: Низкий
fstec логотип

BDU:2023-03862

больше 4 лет назад

Уязвимость команды systemctl status подсистемы инициализации и управления службами Systemd, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02019-1

около 2 месяцев назад

Security update for systemd

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:1776-1

больше 2 лет назад

Security update for systemd

EPSS: Низкий
redos логотип

ROS-20240425-05

больше 1 года назад

Множественные уязвимости systemd

CVSS3: 7.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-8989-8fhv-vq42

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
5%
Низкий
больше 2 лет назад
ubuntu логотип
CVE-2023-26604

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
5%
Низкий
больше 2 лет назад
redhat логотип
CVE-2023-26604

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 6.3
5%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-26604

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
5%
Низкий
больше 2 лет назад
msrc логотип
CVSS3: 7.8
5%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-26604

systemd before 247 does not adequately block local privilege escalatio ...

CVSS3: 7.8
5%
Низкий
больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:1622-1

Security update for systemd

5%
Низкий
больше 2 лет назад
rocky логотип
RLSA-2023:3837

Moderate: systemd security and bug fix update

5%
Низкий
почти 2 года назад
oracle-oval логотип
ELSA-2024-7705

ELSA-2024-7705: systemd security update (MODERATE)

10 месяцев назад
oracle-oval логотип
ELSA-2023-3837

ELSA-2023-3837: systemd security and bug fix update (MODERATE)

около 2 лет назад
fstec логотип
BDU:2023-03862

Уязвимость команды systemctl status подсистемы инициализации и управления службами Systemd, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 7.8
5%
Низкий
больше 4 лет назад
suse-cvrf логотип
SUSE-SU-2025:02019-1

Security update for systemd

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2023:1776-1

Security update for systemd

больше 2 лет назад
redos логотип
ROS-20240425-05

Множественные уязвимости systemd

CVSS3: 7.8
больше 1 года назад

Уязвимостей на страницу