high7.0Public exploit code
CVE-2018-15687
A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- systemd - 'chown_one()' Dereference Symlinks2018-10-29 · local · linux · Verified
Impact
A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canonical | Ubuntu Linux | Versions 16.04, 18.04, 18.10 |
| Systemd Project | Systemd | from 235 before 240 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105748
- https://github.com/systemd/systemd/pull/10517/commits
- https://security.gentoo.org/glsa/201810-10
- https://usn.ubuntu.com/3816-1/
- https://www.exploit-db.com/exploits/45715/
- http://www.securityfocus.com/bid/105748
- https://github.com/systemd/systemd/pull/10517/commits
- https://security.gentoo.org/glsa/201810-10
- https://usn.ubuntu.com/3816-1/
- https://www.exploit-db.com/exploits/45715/