Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2016-10156
HistoryJan 23, 2017 - 7:59 a.m.

CVE-2016-10156

2017-01-2307:59:00
CWE-264
[email protected]
web.nvd.nist.gov
42
4
cve-2016-10156
systemd v228
fs-util.c
systemd timers
local attackers
privilege escalation
root access
nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0

Percentile

13.1%

JSON

A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.

Affected configurations

NVD
Node
systemd_projectsystemdMatch228
VendorProductVersionCPE
systemd_projectsystemd228cpe:/a:systemd_project:systemd:228:::

Social References

More

Related

exploitpack 1
nessus 4
redhatcve 1
cvelist 1
suse 3
debiancve 1
openvas 3
prion 1
zdt 1
packetstorm 1
ubuntucve 1
osv 1
nvd 1
exploitdb 1
photon 1
exploitpack
exploitpack
Systemd 228 (SUSE 12 SP2 Ubuntu Touch 15.04) - Local Privilege Escalation
2017-01-24 00:00:00
nessus
nessus
Photon OS 1.0: Systemd PHSA-2017-0005
2019-02-07 00:00:00
SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2017:0279-1)
2017-01-26 00:00:00
openSUSE Security Update : systemd (openSUSE-2017-150)
2017-01-26 00:00:00
redhatcve
redhatcve
CVE-2016-10156
2017-01-24 13:17:49
cvelist
cvelist
CVE-2016-10156
2017-01-23 06:49:00
suse
suse
Security update for systemd (important)
2017-01-25 13:08:53
Security update for systemd (important)
2017-01-25 22:08:20
Security update for SLES 12-SP2 Docker image (important)
2017-10-11 03:08:09
debiancve
debiancve
CVE-2016-10156
2017-01-23 07:59:00
openvas
openvas
openSUSE: Security Advisory for systemd (openSUSE-SU-2017:0287-1)
2017-02-22 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:0279-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:2701-1)
2021-06-09 00:00:00
prion
prion
Code injection
2017-01-23 07:59:00
zdt
zdt
Systemd 228 - Privilege Escalation Vulnerability
2017-01-26 00:00:00
packetstorm
packetstorm
Systemd 228 Privilege Escalation
2017-01-27 00:00:00
ubuntucve
ubuntucve
CVE-2016-10156
2017-01-23 00:00:00
osv
osv
CVE-2016-10156
2017-01-23 07:59:00
nvd
nvd
CVE-2016-10156
2017-01-23 07:59:00
exploitdb
exploitdb
Systemd 228 (SUSE 12 SP2 / Ubuntu Touch 15.04) - Local Privilege Escalation
2017-01-24 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2017-0022
2017-02-16 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

0

Percentile

13.1%

JSON
Related for CVE-2016-10156
exploitpack1nessus4redhatcve1cvelist1suse3debiancve1openvas3prion1zdt1packetstorm1ubuntucve1osv1nvd1exploitdb1photon1