CVE-2019-3844CWE-268

It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to…

Medium · published April 26, 2019

CVSS v3.0
4.5
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.

The record
Technical detail
CVSS v3.0
4.5 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00915 · 59.8th percentile
Weakness
CWE-268 · Privilege Chaining
Published
2019-04-26T20:26Z
EPSS history
Timeline
  • 26 APR 20:26Z
    It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to…
    cvelistv5