HIGH✓ PATCH🇬🇧 English

CVE-2019-3844

CVSS 7.8v3.1pub. 2019-04-26upd. 2024-11-21

It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Canonical Ubuntu

    OS
    Canonical
    16.0418.0419.10

  • Netapp Cn1610

    HW
    Netapp
    wszystkie wersje

  • Netapp Cn1610 Firmware

    OS
    Netapp
    wszystkie wersje

  • Netapp Hci Management Node

    APP
    Netapp
    wszystkie wersje

  • Netapp Snapprotect

    APP
    Netapp
    wszystkie wersje

  • Netapp Solidfire

    APP
    Netapp
    wszystkie wersje

  • Systemd Project Systemd

    APP
    Systemd Project
    < 242
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2022-0543CRITICAL10.0⚠ KEVten sam produkt

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debia...

CVE-2020-11651CRITICAL9.8⚠ KEVten sam produkt

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process Clea...

CVE-2020-7247CRITICAL9.8⚠ KEVten sam produkt

smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote att...

CVE-2019-16928CRITICAL9.8⚠ KEVten sam produkt

Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is...