High severity · published Jan 23, 2017
CVE-2016-10156
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their…
7.8
CVSS
1.2%
EPSS
No
On KEV
Description
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SY
Systemd · Systemd Project
228 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-10156
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-10156
Third Party Advisory
http://www.securityfocus.com/bid/95790
www.securitytracker.com
http://www.securitytracker.com/id/1037686
Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1020601
Issue Tracking
https://github.com/systemd/systemd/commit/06eeacb6fe029804f296b065b3ce91e796e1cd0e
Issue Tracking
https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2f
www.exploit-db.com
https://www.exploit-db.com/exploits/41171/
More from Systemd
9.8
CVE-2022-2526
A use-after-free vulnerability was found in systemd
9.8
CVE-2018-21029
systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS
9.8
CVE-2015-7510
Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd
9.8
CVE-2017-1000082
systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g
8.8
CVE-2018-15688
A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd