REDHAT-BUG-862324: Medium severity systemd vulnerability
A possibility of unauthorized Xorg X11 Server configuration file modification / injection was found in the way SetX11Keyboard() method of systemd, a system and service manager, performed sanitization of provided X Keyboard Extension (XKB) layouts description (special and control characters were not filtered out from the layout description properly). When the host in question used PolicyKit Local Authority (PKLA) file mechanism to grant group of users the privilege to change XKB settings (instead of default PolicyKit check) and particular local attacker was member of that group, they could use this flaw to inject arbitrary values into the Xorg X11 Server configuration file, possibly leading to escalation of their privileges.
Issue found by Florian Weimer, Red Hat Product Security Team
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-862324?
The severity of REDHAT-BUG-862324 is considered high due to the potential for unauthorized file modifications.
How do I fix REDHAT-BUG-862324?
To fix REDHAT-BUG-862324, update systemd to the latest version where the vulnerability has been addressed.
What vulnerabilities are associated with REDHAT-BUG-862324?
REDHAT-BUG-862324 is associated with unauthorized modification or injection vulnerabilities in the Xorg X11 Server configuration.
Who is affected by REDHAT-BUG-862324?
Users of systemd, especially those utilizing X11 Server configurations, are affected by REDHAT-BUG-862324.
Can exploit attempts targeting REDHAT-BUG-862324 be detected?
Yes, monitoring for anomalous changes to Xorg configuration files may help detect exploit attempts related to REDHAT-BUG-862324.