CVE-2019-3844: Privilege Chaining

It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that wil...

systemd - DynamicUser can Create setuid Binaries when Assisted by Another Process

This bug report describes a bug in systemd that allows a service with DynamicUser in collaboration with another service or user to create a setuid binary that can be used to access its UID beyond the lifetime of the service. This bug probably has relatively low severity, given that there aren't...

systemd DynamicUser SetUID Binary Creation

systemd: DynamicUser can create setuid binaries when assisted by another process Related CVE Numbers: CVE-2019-3844. I am sending this bug report to Ubuntu as requested by systemd at . This bug report describes a bug in systemd that allows a service with DynamicUser in collaboration with another...

PT-2019-6160

Name of the Vulnerable Software and Affected Versions systemd affected versions not specified Description The issue is related to a systemd service that utilizes the DynamicUser property, which can lead to the creation of a SUID/SGID binary. This binary can run as the transient service UID/GID ev...

PT-2019-6159

Name of the Vulnerable Software and Affected Versions systemd affected versions not specified Description The issue is related to a systemd service that utilizes the DynamicUser property, allowing it to gain new privileges through the execution of SUID binaries. This could enable a local attacker...