systemd CVE-2017-1000082 Local Privilege Escalation Vulnerability

Bugtraq ID:	99507
Class:	Input Validation Error
CVE:	CVE-2017-1000082
Remote:	No
Local:	Yes
Published:	Jul 02 2017 12:00AM
Updated:	Jul 02 2017 12:00AM
Credit:	Daniel Skowronski
Vulnerable:	systemd systemd 233
Not Vulnerable:

systemd CVE-2017-1000082 Local Privilege Escalation Vulnerability

systemd is prone to a local privilege-escalation vulnerability.

Local attackers can exploit this issue to gain root privileges.

systemd 233 is vulnerable; other versions may also be affected.

systemd CVE-2017-1000082 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

systemd CVE-2017-1000082 Local Privilege Escalation Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

systemd CVE-2017-1000082 Local Privilege Escalation Vulnerability

References:

• CVE-2017-1000082 (Red Hat Bugzilla)
  
• systemd can't handle the process previlege that belongs to user name startswith (systemd)
  
• systemd Package (freedesktop.org)
  
• Bug 1468427 - (CVE-2017-1000082) CVE-2017-1000082 systemd: fails to parse userna (Red Hat Bugzilla)