Local Privilege Escalation Flaw in Systemd by Vendor Systemd
CVE-2016-10156

7.8HIGH

Key Information:

Vendor

Systemd Project

Status
Systemd
Vendor
CVE Published:
23 January 2017

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2016-10156?

A vulnerability in Systemd version 228 allows the creation of world writable suid files due to issues in the systemd timers features. This misconfiguration can be exploited by local attackers to escalate privileges and gain root access, posing a significant security risk. The flaw is addressed in version 229, which mitigates this risk by correcting the file permission handling.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2016-10156 - Proof of Concept

References

https://github.com/systemd/systemd/commit/06eeacb6fe02980...
x_refsource_MISC
https://bugzilla.suse.com/show_bug.cgi?id=1020601
x_refsource_MISC
http://www.securitytracker.com/id/1037686
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.