Количество 7
Количество 7
CVE-2019-15718
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.
CVE-2019-15718
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.
CVE-2019-15718
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.
CVE-2019-15718
In systemd 240, bus_open_system_watch_bind_with_description in shared/ ...
GHSA-p39j-chr3-gjhq
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.
ELSA-2019-3592
ELSA-2019-3592: systemd security, bug fix, and enhancement update (MODERATE)
BDU:2019-03212
Уязвимость функции bus_open_system_watch_bind_with_description (shared/bus-util.c) демона Systemd, позволяющая нарушителю повысить свои привилегии и изменить DNS настройки
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2019-15718 In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings. | CVSS3: 4.4 | 0% Низкий | больше 6 лет назад | |
CVE-2019-15718 In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings. | CVSS3: 5.3 | 0% Низкий | больше 6 лет назад | |
CVE-2019-15718 In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings. | CVSS3: 4.4 | 0% Низкий | больше 6 лет назад | |
CVE-2019-15718 In systemd 240, bus_open_system_watch_bind_with_description in shared/ ... | CVSS3: 4.4 | 0% Низкий | больше 6 лет назад | |
GHSA-p39j-chr3-gjhq In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings. | 0% Низкий | больше 3 лет назад | ||
ELSA-2019-3592 ELSA-2019-3592: systemd security, bug fix, and enhancement update (MODERATE) | около 6 лет назад | |||
BDU:2019-03212 Уязвимость функции bus_open_system_watch_bind_with_description (shared/bus-util.c) демона Systemd, позволяющая нарушителю повысить свои привилегии и изменить DNS настройки | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
Уязвимостей на страницу