Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25605
HistoryJun 04, 2020 - 5:32 a.m.

Privilege Escalation

2020-06-0405:32:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17

EPSS

0.007

Percentile

80.6%

libsystemd.so are susceptible to privilege escalation. The attack exists because of an incomplete fix for CVE-2017-1000082 which does not properly handle parsing of usernames starting with a numeric digit, leading to misinterpretation of usernames into user identifiers. An attacker is able to exploit this vulnerability to obtain root privileges.