PT-2018-2799
CVE-2018-15686
·
تاريخ النشر
2018-10-26
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
systemd versions up to and including 239
Description
A vulnerability in
unit deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation.Recommendations
For systemd versions up to and including 239, update to a version higher than 239 to resolve the issue.
As a temporary workaround, consider restricting access to
NotifyAccess to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾