Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

systemd project systemd 30 vulnerabilities and exploits

(subscribe to this query)
6.3
CVSSv2
CVE-2012-0871
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and previous versions, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
Systemd Project Systemd 31Systemd Project Systemd 30Systemd Project Systemd 29Systemd Project Systemd 28Systemd Project Systemd 14Systemd Project Systemd 13Systemd Project Systemd 12Systemd Project Systemd 11Opensuse Opensuse 12.1Systemd Project SystemdSystemd Project Systemd 36Systemd Project Systemd 23Systemd Project Systemd 22Systemd Project Systemd 21Systemd Project Systemd 20Systemd Project Systemd 19Systemd Project Systemd 6Systemd Project Systemd 5Systemd Project Systemd 4Systemd Project Systemd 3Systemd Project Systemd 34Systemd Project Systemd 32
4.4
CVSSv2
CVE-2019-3842
In systemd before v242-rc4, it exists that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked ...
Systemd Project Systemd 242Systemd Project SystemdRedhat Enterprise Linux 7.0Fedoraproject Fedora 30Debian Debian Linux 8.0
4.6
CVSSv2
CVE-2019-3843
It exists that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potenti...
Systemd Project SystemdFedoraproject Fedora 30Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.10Netapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Cn1610 Firmware -
2.1
CVSSv2
CVE-2019-20386
An issue exists in button_open in login/logind-button.c in systemd prior to 243. When executing the udevadm trigger command, a memory leak may occur.
Systemd Project SystemdCanonical Ubuntu Linux 18.04Fedoraproject Fedora 30Opensuse Leap 15.1Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 16.04Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified Manager -
3.6
CVSSv2
CVE-2019-15718
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by e...
Systemd Project Systemd 240Fedoraproject Fedora 29Fedoraproject Fedora 30Fedoraproject Fedora 31Redhat Enterprise Linux 8.0Redhat Openshift Container Platform 4.1Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server Update Services For Sap Solutions 8.4Redhat Enterprise Linux Server Update Services For Sap Solutions 8.1Redhat Enterprise Linux For Power Little Endian Eus 8.2Redhat Enterprise Linux For Ibm Z Systems Eus 8.2Redhat Enterprise Linux For Ibm Z Systems Eus 8.1Redhat Enterprise Linux For Power Little Endian Eus 8.1Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems Eus 8.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3661open redirectCVE-2024-25512CVE-2024-33788command injectionSSTICVE-2024-0043CVE-2024-29210CVE-2024-25510
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook