PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour systemd au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 2
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.