CVE-2019-3843

It was discovered that a systemd service that uses DynamicUser property can
create a SUID/SGID binary that would be allowed to run as the transient
service UID/GID even after the service is terminated. A local attacker may
use this flaw to access resources that will be owned by a potentially
different service in the future, when the UID/GID will be recycled.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=928102&gt;
• <https://bugs.chromium.org/p/project-zero/issues/detail?id=1771&gt;
• <https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1814596&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3843&gt;