EDB-46760
functionalsystemd - DynamicUser can Create setuid Binaries when Assisted by Another Process
view exploit source exploit_dbverifiedtype dosauthor Google Security Researchpublished 2019-04-26catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-3844US | high7.8 | Exploit | ||
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by… | ||||
| CVE-2019-3843US | high7.8 | Exploit | ||
It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the s… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan