REDHAT-BUG-859060: Race Condition
A TOCTOU (time-of-check time-of-use) race condition was found in the way systemd, a system and service manager, used to update file permissions and SELinux security contexts. A local attacker could use this flaw to conduct symbolic link attacks possibly leading to their ability to modify permissions / security context of a path different than originally intended / requested.
Issue found by Florian Weimer, Red Hat Product Security Team
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-859060?
The severity of REDHAT-BUG-859060 is considered high due to the potential for local attackers to exploit the TOCTOU race condition.
How do I fix REDHAT-BUG-859060?
To fix REDHAT-BUG-859060, update systemd to the latest version provided by Red Hat that addresses this vulnerability.
Who is affected by REDHAT-BUG-859060?
REDHAT-BUG-859060 affects users of the systemd component in Red Hat distributions.
What type of attack is possible with REDHAT-BUG-859060?
A local attacker could conduct symbolic link attacks to potentially modify file permissions and SELinux security contexts.
What is the nature of the flaw in REDHAT-BUG-859060?
The flaw in REDHAT-BUG-859060 is a time-of-check time-of-use (TOCTOU) race condition related to file permission updates.