CVE-2016-10156

A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.

CVSS v3.0 NVD

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.21% chance of exploitation in the next 30 days, 68th percentile

Published

2017-01-23

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/41171

Security advisories

• http://www.securityfocus.com/bid/95790
• systemd/systemd/commit/06eeacb6fe029804f296b065b3ce91e796e1cd0e
• https://bugzilla.suse.com/show_bug.cgi?id=1020601

References

• CVE Record
• NVD entry