CVE-2016-10156

Published: Jan 23, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.

Affected (1)

Products: Systemd Project: Systemd

Systemd Project

1 product

Systemd

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Systemd Project Systemd	Version 228

Related CWEs

CWE-264

References (12)

http://www.securityfocus.com/bid/95790

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037686

Source: cve@mitre.org

https://bugzilla.suse.com/show_bug.cgi?id=1020601

Source: cve@mitre.org

Issue Tracking

https://github.com/systemd/systemd/commit/06eeacb6fe029804f296b065b3ce91e796e1cd0e

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2f

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://www.exploit-db.com/exploits/41171/

Source: cve@mitre.org

http://www.securityfocus.com/bid/95790