Red Hat Security AdvisoryRHSA-2020:1794
systemd security, bug fix, and enhancement update
Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) systemd-239-29.el8, systemd-container-239-29.el8, systemd-devel-239-29.el8 +5
Fixes 2 records
Priority LOW 36
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the se…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00915 · Published 2019-04-26 · Fixed CWE-268
Priority LOW 36
It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0094 · Published 2019-04-26 · Fixed CWE-266
