It exists that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
systemd project systemd |
||
fedoraproject fedora 30 |
||
canonical ubuntu linux 16.04 |
||
canonical ubuntu linux 18.04 |
||
canonical ubuntu linux 19.10 |
||
netapp solidfire - |
||
netapp hci management node - |
||
netapp snapprotect - |
||
netapp cn1610_firmware - |