Lucene search

CVE-2019-3842

🗓️ 09 Apr 2019 21:03:29Reported by redhatType

In systemd before v242-rc4, pam_systemd allows an attacker to manipulate XDG_SEAT variable for unauthorized commands

Reporter	Title	Published	Views	Family All 88
Tenable Nessus	EulerOS 2.0 SP3 : systemd (EulerOS-SA-2019-1599)	29 May 201900:00	–	nessus
Tenable Nessus	Photon OS 2.0: Systemd PHSA-2019-2.0-0153	15 May 201900:00	–	nessus
Tenable Nessus	Photon OS 1.0: Systemd PHSA-2019-1.0-0228	14 May 201900:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : systemd vulnerability (USN-3938-1)	9 Apr 201900:00	–	nessus
Tenable Nessus	Photon OS 3.0: Systemd PHSA-2019-3.0-0012	22 Jul 202400:00	–	nessus
Tenable Nessus	Debian DSA-4428-1 : systemd - security update	9 Apr 201900:00	–	nessus
Tenable Nessus	Fedora 30 : systemd (2019-3fa5db9e19)	2 May 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : systemd (EulerOS-SA-2019-1344)	6 May 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : systemd (EulerOS-SA-2019-1923)	17 Sep 201900:00	–	nessus
Tenable Nessus	CentOS 8 : systemd (CESA-2021:1611)	19 May 202100:00	–	nessus

Nvd

Vulners

Node

systemd_project systemdRange≤241

systemd_project systemdMatch242rc1

systemd_project systemdMatch242rc2

systemd_project systemdMatch242rc3

Node

redhat enterprise_linuxMatch7.0

Node

fedoraproject fedoraMatch30

Node

debian debian_linuxMatch8.0

[
  {
    "product": "systemd",
    "vendor": "The systemd Project",
    "versions": [
      {
        "status": "affected",
        "version": "v242-rc4"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/46743/
lists	www.lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
packetstormsecurity	www.packetstormsecurity.com/files/152610/systemd-Seat-Verification-Active-Session-Spoofing.html
lists	www.lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/STR36RJE4ZZIORMDXRERVBHMPRNRTHAC/
lists	www.lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2019/04/msg00022.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Apr 2019 21:29Current

6.8Medium risk

Vulners AI Score6.8

CVSS24.4

CVSS37.0

EPSS0.002