CVE-2020-13776

Name of the Vulnerable Software and Affected Versions systemd versions prior to v245

Description The issue is related to a lack of input validation in the Linux systemd initialization and service management subsystem. This can be exploited by an attacker to gain access to confidential data, compromise data integrity, and cause a denial of service. The problem arises from the mishandling of numerical usernames, such as those composed of decimal digits or 0x followed by hex digits. For example, this can lead to the use of root privileges when the privileges of the 0x0 user account were intended.

Recommendations For versions prior to v245, update to version v245 or later to resolve the issue. As a temporary workaround, consider restricting the use of numerical usernames to minimize the risk of exploitation.