CVE-2012-0871

Published: Apr 18, 2014Modified: May 6, 2026

6.3

Vector

AV:L/AC:M/Au:N/C:N/I:C/A:C

Exploitability: 3.4 / Impact: 9.2

Source: NVD

Description

The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.

Affected (38)

Products: Opensuse: Opensuse · Systemd Project: Systemd

1 product

1 product

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 12.1
Systemd Project Systemd	Up to 037
Systemd Project Systemd	Version 10
Systemd Project Systemd	Version 11
Systemd Project Systemd	Version 12
Systemd Project Systemd	Version 13
Systemd Project Systemd	Version 14
Systemd Project Systemd	Version 15
Systemd Project Systemd	Version 16
Systemd Project Systemd	Version 17
Systemd Project Systemd	Version 18
Systemd Project Systemd	Version 19
Systemd Project Systemd	Version 1
Systemd Project Systemd	Version 20
Systemd Project Systemd	Version 21
Systemd Project Systemd	Version 22
Systemd Project Systemd	Version 23
Systemd Project Systemd	Version 24
Systemd Project Systemd	Version 25
Systemd Project Systemd	Version 26
Systemd Project Systemd	Version 27
Systemd Project Systemd	Version 28
Systemd Project Systemd	Version 29
Systemd Project Systemd	Version 2
Systemd Project Systemd	Version 30
Systemd Project Systemd	Version 31
Systemd Project Systemd	Version 32
Systemd Project Systemd	Version 33
Systemd Project Systemd	Version 34
Systemd Project Systemd	Version 35
Systemd Project Systemd	Version 36
Systemd Project Systemd	Version 3
Systemd Project Systemd	Version 4
Systemd Project Systemd	Version 5
Systemd Project Systemd	Version 6
Systemd Project Systemd	Version 7
Systemd Project Systemd	Version 8
Systemd Project Systemd	Version 9