CVE-2018-6954
High
Description
systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.
SeverityHigh
CVSS7.8
Exploit probability—
ProductSystemd
PublishedFeb 13, 2018
First seenFeb 13, 2018
Weakness typeCWE-59Improper link resolution
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| systemd_project systemd | v ≤ 237 | — |
| canonical ubuntu_linux | 16.04, 18.04, 18.10 | — |
| opensuse leap | 42.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.