High severity · published Apr 26, 2019
CVE-2019-3844
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned…
7.8
CVSS
0.9%
EPSS
No
On KEV
Description
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cn1610 Firmware · Netapp
All versions, or not specified · source: NVD
HM
Hci Management Node · Netapp
All versions, or not specified · source: NVD
SN
Snapprotect · Netapp
All versions, or not specified · source: NVD
SO
Solidfire · Netapp
All versions, or not specified · source: NVD
SY
Systemd · Systemd Project
before 242 · source: NVD
UL
Ubuntu Linux · Canonical
16.04; 18.04; 19.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-3844
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-3844
Third Party Advisory
http://www.securityfocus.com/bid/108096
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3844
lists.apache.org
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
lists.apache.org
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190619-0002/
Third Party Advisory
https://usn.ubuntu.com/4269-1/
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation