DebianDEBIAN:DLA-3377-1:A063E[SECURITY] [DLA 3377-1] systemd security update
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
0.0005 Low
EPSS
Percentile
16.0%
Debian LTS Advisory DLA-3377-1 [email protected]
https://www.debian.org/lts/security/ Adrian Bunk
March 31, 2023 https://wiki.debian.org/LTS
Package : systemd
Version : 241-7~deb10u9
CVE ID : CVE-2023-26604
Local privilege escalation for some sudo configurations has been fixed
in systemd, the default init system in Debian.
For Debian 10 buster, this problem has been fixed in version 241-7~deb10u9.
We recommend that you upgrade your systemd packages.
For the detailed security status of systemd please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/systemd
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 10 | all | libnss-mymachines | < 241-7~deb10u9 | libnss-mymachines_241-7~deb10u9_all.deb |
| Debian | 10 | all | systemd-journal-remote | < 241-7~deb10u9 | systemd-journal-remote_241-7~deb10u9_all.deb |
| Debian | 10 | all | libsystemd0 | < 241-7~deb10u9 | libsystemd0_241-7~deb10u9_all.deb |
| Debian | 10 | all | systemd-sysv | < 241-7~deb10u9 | systemd-sysv_241-7~deb10u9_all.deb |
| Debian | 10 | all | udev | < 241-7~deb10u9 | udev_241-7~deb10u9_all.deb |
| Debian | 10 | all | libsystemd-dev | < 241-7~deb10u9 | libsystemd-dev_241-7~deb10u9_all.deb |
| Debian | 10 | all | libnss-myhostname | < 241-7~deb10u9 | libnss-myhostname_241-7~deb10u9_all.deb |
| Debian | 10 | all | systemd-tests | < 241-7~deb10u9 | systemd-tests_241-7~deb10u9_all.deb |
| Debian | 10 | all | systemd-coredump | < 241-7~deb10u9 | systemd-coredump_241-7~deb10u9_all.deb |
| Debian | 10 | all | libnss-resolve | < 241-7~deb10u9 | libnss-resolve_241-7~deb10u9_all.deb |
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
0.0005 Low
EPSS
Percentile
16.0%