freedesktop systemd CVE-2018-15687 vulnerability in FreeDesktop and Other Products
Published on October 26, 2018

systemd: chown_one() can dereference symlinks

product logo product logo product logo
A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.

Vendor Advisory Vendor Advisory NVD

Weakness Type

What is a Race Condition Vulnerability?

The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

CVE-2018-15687 has been classified to as a Race Condition vulnerability or weakness.


Products Associated with CVE-2018-15687

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-15687 are published in these products:

 
 
 

Affected Versions

systemd:

Exploit Probability

EPSS
0.33%
Percentile
55.64%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.