CVE-2019-3843

Name of the Vulnerable Software and Affected Versions systemd (affected versions not specified)

Description The issue is related to a systemd service that utilizes the DynamicUser property, which can lead to the creation of a SUID/SGID binary. This binary can run as the transient service UID/GID even after the service has been terminated, potentially allowing a local attacker to access resources that will be owned by a different service in the future when the UID/GID is recycled. The vulnerability is associated with incorrect privilege assignment and can be exploited to gain access to confidential data, compromise data integrity, and cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.