Логотип exploitDog
bind:CVE-2023-26604
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-26604

Количество 14

Количество 14

ubuntu логотип

CVE-2023-26604

почти 3 года назад

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2023-26604

почти 3 года назад

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 6.3
EPSS: Низкий
nvd логотип

CVE-2023-26604

почти 3 года назад

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
EPSS: Низкий
msrc логотип

CVE-2023-26604

почти 3 года назад

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations e.g. plausible sudoers files in which the "systemctl status" command may be executed. Specifically systemd does not set LESSSECURE to 1 and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2023-26604

почти 3 года назад

systemd before 247 does not adequately block local privilege escalatio ...

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:1622-1

почти 3 года назад

Security update for systemd

EPSS: Низкий
rocky логотип

RLSA-2023:3837

больше 2 лет назад

Moderate: systemd security and bug fix update

EPSS: Низкий
github логотип

GHSA-8989-8fhv-vq42

почти 3 года назад

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
EPSS: Низкий
oracle-oval логотип

ELSA-2024-7705

больше 1 года назад

ELSA-2024-7705: systemd security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2023-3837

больше 2 лет назад

ELSA-2023-3837: systemd security and bug fix update (MODERATE)

EPSS: Низкий
fstec логотип

BDU:2023-03862

около 5 лет назад

Уязвимость команды systemctl status подсистемы инициализации и управления службами Systemd, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02019-1

8 месяцев назад

Security update for systemd

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:1776-1

почти 3 года назад

Security update for systemd

EPSS: Низкий
redos логотип

ROS-20240425-05

почти 2 года назад

Множественные уязвимости systemd

CVSS3: 7.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-26604

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
5%
Низкий
почти 3 года назад
redhat логотип
CVE-2023-26604

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 6.3
5%
Низкий
почти 3 года назад
nvd логотип
CVE-2023-26604

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
5%
Низкий
почти 3 года назад
msrc логотип
CVE-2023-26604

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations e.g. plausible sudoers files in which the "systemctl status" command may be executed. Specifically systemd does not set LESSSECURE to 1 and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
5%
Низкий
почти 3 года назад
debian логотип
CVE-2023-26604

systemd before 247 does not adequately block local privilege escalatio ...

CVSS3: 7.8
5%
Низкий
почти 3 года назад
suse-cvrf логотип
SUSE-SU-2023:1622-1

Security update for systemd

5%
Низкий
почти 3 года назад
rocky логотип
RLSA-2023:3837

Moderate: systemd security and bug fix update

5%
Низкий
больше 2 лет назад
github логотип
GHSA-8989-8fhv-vq42

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.

CVSS3: 7.8
5%
Низкий
почти 3 года назад
oracle-oval логотип
ELSA-2024-7705

ELSA-2024-7705: systemd security update (MODERATE)

больше 1 года назад
oracle-oval логотип
ELSA-2023-3837

ELSA-2023-3837: systemd security and bug fix update (MODERATE)

больше 2 лет назад
fstec логотип
BDU:2023-03862

Уязвимость команды systemctl status подсистемы инициализации и управления службами Systemd, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 7.8
5%
Низкий
около 5 лет назад
suse-cvrf логотип
SUSE-SU-2025:02019-1

Security update for systemd

8 месяцев назад
suse-cvrf логотип
SUSE-SU-2023:1776-1

Security update for systemd

почти 3 года назад
redos логотип
ROS-20240425-05

Множественные уязвимости systemd

CVSS3: 7.8
почти 2 года назад

Уязвимостей на страницу