Unscored severity · published Apr 18, 2014
CVE-2012-0871
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Opensuse · Opensuse
12.1 · source: NVD
SY
Systemd · Systemd Project
through 037; 1; 2; 3; 4; 5; +31 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0871
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0871
cgit.freedesktop.org
http://cgit.freedesktop.org/systemd/systemd/commit/?id=fc3c1c6e091ea16ad5600b145201ec535bbb5d7c
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00030.html
www.osvdb.org
http://www.osvdb.org/79768
bugzilla.novell.com
https://bugzilla.novell.com/show_bug.cgi?id=747154
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=795853
More from Opensuse
9.8
CVE-2016-4171
Adobe Flash Player Remote Code Execution Vulnerability
9.8
CVE-2016-4117
Adobe Flash Player Arbitrary Code Execution Vulnerability
9.8
CVE-2016-3427
Oracle Java SE and JRockit Unspecified Vulnerability
9.8
CVE-2015-2590
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
9.8
CVE-2015-5119
Adobe Flash Player Use-After-Free Vulnerability