3978 matches found
CVE-2018-15687 affecting package systemd 239-44
CVE-2018-15687 affecting package systemd 239-44. A patched version of the package is available...
CVE-2018-15686 affecting package systemd 239-44
CVE-2018-15686 affecting package systemd 239-44. A patched version of the package is available...
CVE-2018-15688 affecting package systemd 239-44
CVE-2018-15688 affecting package systemd 239-44. A patched version of the package is available...
CVE-2018-16866 affecting package systemd 239-44
CVE-2018-16866 affecting package systemd 239-44. A patched version of the package is available...
CVE-2018-16864 affecting package systemd 239-44
CVE-2018-16864 affecting package systemd 239-44. A patched version of the package is available...
Systemd journald Privilege Escalation (CVE-2018-16864)
A privilege escalation vulnerability exists in Systemd-journald. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
Vulnerabilities in the initialization and service management of Linux Systemd, related to incorrect default permissions, allow attackers to access confidential data, compromise its integrity, and cause service failures.
Vulnerabilities in the initialization and service management of Linux’s systemd are related to incorrect standard permissions for low-security administrators. Exploiting these vulnerabilities can allow remote attackers to access sensitive data, compromise its integrity, and cause service failures...
SUSE-SU-2020:14454-1 Security update for python-azure-agent
This update for python-azure-agent fixes the following issues: + Properly set the dhcp configuration to push the hostname to the DHCP server bsc1173866 + Do not bring the interface down to push the hostname, just use ifup + Set the hostname using hostnamectl to ensure setting is properly applied...
systemd: reexec state injection: fgets() on overlong lines leads to line splitting
...
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future when the GID will be recycled.
...
systemd: chown_one() can dereference symlinks
...
Out-of-Bounds write in systemd-networkd dhcpv6 option handling
...
In systemd before v242-rc4 it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker in some particular configurations to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
...
A heap use-after-free vulnerability was found in systemd before version v245-rc1 where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges by sending specially crafted dbus messages.
...
An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command a memory leak may occur.
...
It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future when the UID/GID will be recycled.
...
An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.
...
An allocation of memory without limits that could result in the stack clashing with another memory region was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker or a remote one if systemd-journal-remote is used may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.
...
An allocation of memory without limits that could result in the stack clashing with another memory region was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable.
...
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1 causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
...