CVE-2019-3844: High severity Systemd Project Systemd vulnerability
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2019-3844.
What is the severity of CVE-2019-3844?
The severity of CVE-2019-3844 is high with a severity value of 7.8.
Which software and versions are affected by CVE-2019-3844?
The following software and versions are affected by CVE-2019-3844: Systemd Project Systemd (up to version 242), Canonical Ubuntu Linux 16.04 LTS, Canonical Ubuntu Linux 18.04 LTS, Canonical Ubuntu Linux 19.10, Netapp HCI Management Node, Netapp Snapprotect, Netapp Solidfire, and Netapp Cn1610 Firmware.
How can a local attacker exploit CVE-2019-3844?
A local attacker can exploit CVE-2019-3844 by using a systemd service with DynamicUser property to execute SUID binaries and create binaries owned by the service transient group with the setgid bit set, which can grant new privileges and access resources.
Are there any known remedies or fixes for CVE-2019-3844?
Yes, there are known remedies or fixes for CVE-2019-3844. For example, the Ubuntu package `systemd` can be fixed by applying version 237-3ubuntu10.38.