IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.8Hoch

CVE-2018-15687systemd: chown_one() can dereference symlinks

systemd systemd Veröffentlicht: (vor 8 Jahren)

Beschreibung

A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.

Schwachstellentyp (CWE): CWE-362

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
systemd systemd unspecified – ≤ 239

Referenzen und Patches

Neue CVEs im selben Produkt — systemd

2.9Niedrig
CVE-2026-40228
systemd systemd

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

6.2Mittel
CVE-2026-40227
systemd systemd

In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.

6.4Mittel
CVE-2026-40226
systemd systemd

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

6.4Mittel
CVE-2026-40225
systemd systemd

In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.

6.7Mittel
CVE-2026-40224
systemd systemd

In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace.

4.7Mittel
CVE-2026-40223
systemd systemd

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running.