CVE-2019-3844

Related Files

Red Hat Security Advisory 2020-1794-01

Posted Apr 28, 2020

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2020-1794-01 - The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups.

tags | advisory

systems | linux, redhat

advisories | CVE-2019-3843, CVE-2019-3844

SHA-256 | d5ecc1fe36edb6481e7e9b4bef611a58936b4a419709b8d114457fa03c0f95c6

Download | Favorite | View

systemd DynamicUser SetUID Binary Creation

Posted Apr 25, 2019

Authored by Jann Horn, Google Security Research

This bug report describes a bug in systemd that allows a service with DynamicUser in collaboration with another service or user to create a setuid binary that can be used to access its UID beyond the lifetime of the service. This bug probably has relatively low severity, given that there are not many services yet that use DynamicUser, and the requirement of collaboration with another process limits the circumstances in which it would be useful to an attacker further; but in a system that makes heavy use of DynamicUser, it would probably have impact.

tags | exploit

advisories | CVE-2019-3844

SHA-256 | 064bbdd76f48df03346ba02e71f7b8230c92792ac615692d64f9d04ec97b425c

Download | Favorite | View