systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

🗓️ 18 Aug 2020 00:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com

Systemd 245 mishandles numeric usernames, enabling root access due to CVE-2017-1000082 fix.

Reporter	Title	Published	Views	Family All 96
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
Tenable Nessus	Amazon Linux 2 : systemd (ALAS-2022-1854)	10 Oct 202200:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0039: systemd (ALINUX3-SA-2022:0039)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : systemd (ALSA-2021:1611)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : systemd (CESA-2021:1611)	19 May 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : systemd (EulerOS-SA-2021-1174)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : systemd (EulerOS-SA-2021-1258)	5 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : systemd (EulerOS-SA-2021-1277)	5 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : systemd (EulerOS-SA-2021-1534)	4 Mar 202100:00	–	nessus

Vulners

Node

microsoft cm1_systemd_239-34Range<-

18 Aug 2020 00:00Current

7High risk

Vulners AI Score7

CVSS 3.16.7 - 9.8

CVSS 210

EPSS0.00258

SSVC

systemd numeric usernames root privileges incomplete fix vulnerability_2017