SUSE CVE-2019-15718

In systemd 240, busopensystemwatchbindwithdescription in shared/bus-util.c as used by systemd-resolved to connect to the system D-Bus instance, calls sdbussettrusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that...

Systemd Privilege Escalation

The vulnerability of the busopensystemwatchbindwithdescription function in the shared/bus-util.c file is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges and alter DNS settings...