CVE-2016-10156
published 2017-01-23CVE-2016-10156: A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers…
high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EXPLOIT
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | systemd | < systemd 229-1 (bookworm) | systemd 229-1 (bookworm) |
| systemd_project | systemd | — | — |
| systemd_project | systemd | >= 0 < 229-1 | 229-1 |
| systemd_project | systemd | >= 0 < 229-1 | 229-1 |
| systemd_project | systemd | >= 0 < 229-1 | 229-1 |
| systemd_project | systemd | >= 0 < 229-1 | 229-1 |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH