CVE-2020-13776
published 2020-06-03CVE-2020-13776: systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root…
PriorityP427medium6.7CVSS 3.1
AVLACHPRLUIRSUCHIHAH
EPSS
0.46%
37.3th percentile
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | systemd | < systemd 246-2 (bookworm) | systemd 246-2 (bookworm) |
| fedoraproject | fedora | — | — |
| msrc | cbl_mariner_1.0_arm | — | — |
| msrc | cbl_mariner_1.0_x64 | — | — |
| msrc | cm1_systemd_239-34_on_cbl_mariner_1.0 | — | — |
| systemd_project | systemd | <= 245 | — |
| systemd_project | systemd | >= 0 < 246-2 | 246-2 |
| systemd_project | systemd | >= 0 < 246-2 | 246-2 |
| systemd_project | systemd | >= 0 < 246-2 | 246-2 |
| systemd_project | systemd | >= 0 < 246-2 | 246-2 |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.2MEDIUMAV:L/AC:H/Au:N/C:C/I:C/A:C
osv9.8CRITICAL
vendor_debian9.8LOW
vendor_redhat9.8CRITICAL
vendor_msrc6.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
cisa_ics·2023-12-14
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
ICS Advisory
##
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
Release DateDecember 14, 2023
Alert CodeICSA-23-348-10
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
- Vulnerabilities: Improper Restriction of XML External Entity Reference, Time-of-check Time-of-use (TOCTOU) Race Condition, Command Injection, Miss
Microsoft
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits as demonstrated by use of root privileges when privileges of the 0x0 user accou
vendor_msrc·2020-06-09·CVSS 6.7
CVE-2020-13776 [CRITICAL] CWE-269 systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits as demonstrated by use of root privileges when privileges of the 0x0 user accou
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog p
Red Hat
systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits
vendor_redhat·2020-05-31·CVSS 9.8
CVE-2020-13776 [CRITICAL] CWE-440 systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits
systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
A flaw was found in systemd, where it mishandles numerical usernames beginning with decimal digits, or "0x" followed by hexadecimal digits. When the usernames are used by systemd, for example in service units, an unexpected user may be used instead. In some particular configurations, this flaw allows local attackers to elevate their privileges.
Statement: The flaw is rated as Moderate because
Debian
CVE-2020-13776: systemd - systemd through v245 mishandles numerical usernames such as ones composed of dec...
vendor_debian·2020·CVSS 9.8
CVE-2020-13776 [CRITICAL] CVE-2020-13776: systemd - systemd through v245 mishandles numerical usernames such as ones composed of dec...
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
Scope: local
bookworm: resolved (fixed in 246-2)
bullseye: resolved (fixed in 246-2)
forky: resolved (fixed in 246-2)
sid: resolved (fixed in 246-2)
trixie: resolved (fixed in 246-2)
GHSA
GHSA-g2fm-j5p3-x5h7: systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of ro
ghsa_unreviewed·2022-05-24·CVSS 9.8
CVE-2020-13776 [CRITICAL] CWE-269 GHSA-g2fm-j5p3-x5h7: systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of ro
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
OSV
CVE-2020-13776: systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of ro
osv·2020-06-03·CVSS 9.8
CVE-2020-13776 [CRITICAL] CVE-2020-13776: systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of ro
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2020-13776 systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits
bugzilla·2020-06-09·CVSS 9.8
CVE-2020-13776 [CRITICAL] CVE-2020-13776 systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits
CVE-2020-13776 systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
Reference:
https://github.com/systemd/systemd/issues/15985
Discussion:
Created systemd tracking bugs for this issue:
Affects: fedora-all [bug 1845535]
---
Upstream fixes:
https://github.com/systemd/systemd/commit/156a5fd297b61bce31630d7a52c15614bf784843
https://github.com/systemd/systemd/commit/6495ceddf38aed2c9efdcf9d3440140190800b55
---
When a service uses the `User=` di
Bugzilla
CVE-2020-13776 systemd: mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits [fedora-all]
bugzilla·2020-06-09·CVSS 6.7
CVE-2020-13776 [MEDIUM] CVE-2020-13776 systemd: mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits [fedora-all]
CVE-2020-13776 systemd: mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit messa
Wiz
What Is DevOps Security? Implement, Challenges, Best Practices | Wiz
blogs_wiz·2024-12-02
What Is DevOps Security? Implement, Challenges, Best Practices | Wiz
## What is DevOps security?
DevOps security integrates security practices within the DevOps process from inception through development, deployment, and operations. It breaks down traditional silos between development, operations, and security teams, promoting a culture of security across all phases of the software development lifecycle (SDLC).
- In its early stages, DevOps focused primarily on integrating development and operations teams to improve the software development process.
- Over time, the scope of DevOps expanded to include security (especially when it comes to cloud platforms like AWS, Azure, and Google Cloud), giving rise to the term "DevSecOps."
- This integration marks a significant paradigm shift, emphasizing a comprehensive approach where security measures, championed by
https://github.com/systemd/systemd/issues/15985https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IYGLFEKG45EYBJ7TPQMLWROWPTZBEU63/https://security.netapp.com/advisory/ntap-20200611-0003/https://github.com/systemd/systemd/issues/15985https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IYGLFEKG45EYBJ7TPQMLWROWPTZBEU63/https://security.netapp.com/advisory/ntap-20200611-0003/
2020-06-03
Published