Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-45873
HistoryNov 23, 2022 - 12:00 a.m.

CVE-2022-45873

2022-11-2300:00:00
ubuntu.com
ubuntu.com
13
cve-2022-45873
systemd
local users
deadlock
vulnerability
parse_elf_object
crash
backtrace
exploitation methodology
deeply nested directory
maxconnections=16
systemd-coredump.socket

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

systemd 250 and 251 allows local users to achieve a systemd-coredump
deadlock by triggering a crash that has a long backtrace. This occurs in
parse_elf_object in shared/elf-util.c. The exploitation methodology is to
crash a binary calling the same function recursively, and put it in a
deeply nested directory to make its backtrace large enough to cause the
deadlock. This must be done 16 times when MaxConnections=16 is set for the
systemd/units/systemd-coredump.socket file.

OSVersionArchitecturePackageVersionFilename
ubuntu22.10noarchsystemd< 251.4-1ubuntu7.1UNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%