CVE-2016-10156: High severity Systemd Project Systemd vulnerability
Published Jan 23, 2017
·Updated
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
Affected Software
1 affected component
Systemd Project Systemd=228
Remediation
Event History
Jan 23, 2017
CVE Published
via MITRE·06:49 AM
Data Sourced
via MITRE·06:49 AM
Description
Data Sourced
via NVD·07:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-10156?
CVE-2016-10156 has a medium severity rating due to its potential for local privilege escalation.
2
How do I fix CVE-2016-10156?
To fix CVE-2016-10156, upgrade your systemd version to at least 229.
3
What does CVE-2016-10156 affect?
CVE-2016-10156 affects systemd version 228 and allows the creation of world writable suid files.
4
Who can exploit CVE-2016-10156?
Local attackers with access to the system can exploit CVE-2016-10156 to escalate privileges to root.
5
When was CVE-2016-10156 discovered?
CVE-2016-10156 was discovered in systemd version 228 prior to its fix in version 229.