CVE-2016-10156 Privilege escalation in n/a
Local attackers can escalate privileges to root due to world-writable SUID files created by systemd timers.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-10156?
CVE-2016-10156 is a high-severity vulnerability in Systemd Project Systemd, published on 23 Jan 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
Weakness: CWE-264
Which versions are affected by CVE-2016-10156?
It affects 1 product.
Linux distribution packages (5)
systemd SUSE:Linux Enterprise Desktop 12 SP2 | All versions | 228-132.1 |
systemd SUSE:Linux Enterprise Server 12 SP2 | All versions | 228-132.1 |
systemd SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 | All versions | 228-132.1 |
systemd SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 228-132.1 |
systemd SUSE:Linux Enterprise Software Development Kit 12 SP2 | All versions | 228-132.1 |
Products include Systemd Project Systemd.
How do I fix CVE-2016-10156?
Upgrade to a fixed version.
Is CVE-2016-10156 being exploited?
There is no known exploitation of CVE-2016-10156 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Systemd Project Systemd
Sources
Also known as DEBIAN-CVE-2016-10156, GHSA-4r87-5wgm-7h7m, SUSE-SU-2017:0279-1.