CVE-2013-4392: Race Condition
A TOCTOU (time-of-check time-of-use) race condition was found in the way systemd, a system and service manager, used to update file permissions and SELinux security contexts. A local attacker could use this flaw to conduct symbolic link attacks possibly leading to their ability to modify permissions / security context of a path different than originally intended / requested.
Issue found by Florian Weimer, Red Hat Product Security Team
Other sources
systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4392?
CVE-2013-4392 has been classified with high severity due to its potential to allow local attackers to modify permissions.
How do I fix CVE-2013-4392?
To fix CVE-2013-4392, update systemd to version 239 or later, where the flaw has been addressed.
What systems are affected by CVE-2013-4392?
CVE-2013-4392 affects versions of systemd prior to version 239.
What type of vulnerability is CVE-2013-4392?
CVE-2013-4392 is a TOCTOU (time-of-check time-of-use) race condition vulnerability.
Can CVE-2013-4392 be exploited remotely?
CVE-2013-4392 cannot be exploited remotely; it requires local access to the system.