A flaw was found in systemd, where it mishandles numerical usernames beginning with decimal digits, or "0x" followed by hexadecimal digits.(CVE-2020-13776)

🗓️ 07 Nov 2023 00:00:00Reported by Broadcom Security ResponseType

broadcom

broadcom🔗 support.broadcom.com👁 35 Views

Systemd flaw mishandles decimal and hexadecimal usernames (CVE-2020-13776

Reporter	Title	Published	Views	Family All 81
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
Tenable Nessus	Amazon Linux 2 : systemd (ALAS-2022-1854)	10 Oct 202200:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0039: systemd (ALINUX3-SA-2022:0039)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : systemd (ALSA-2021:1611)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : systemd (CESA-2021:1611)	19 May 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : systemd (EulerOS-SA-2021-1174)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : systemd (EulerOS-SA-2021-1258)	5 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : systemd (EulerOS-SA-2021-1277)	5 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : systemd (EulerOS-SA-2021-1534)	4 Mar 202100:00	–	nessus

Vulners

Node

ibm cloud_pak_for_securityRange<v3.0

07 Nov 2023 19:19Current

7High risk

Vulners AI Score7

CVSS 3.16.7

EPSS0.00464

systemd flaw decimal hexadecimal usernames cve-2020-13776 privileges incomplete fix