CVE-2012-1174: linux systemd Race Condition
CVSS: 3.3v2.0LowModified
AliasesDEBIAN-CVE-2012-1174openSUSE-SU-2024:10112-1
Published 12-07-2012Last modified 06-08-2024
Vulnerability summary
CVE-2012-1174 is a low (CVSS 3.3) Race Condition vulnerability in linux systemd. EPSS estimates a 0.32% chance of exploitation in the next 30 days, higher than 24% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
3.3/10
010
Low · v2.0 (NVD)EPSS score
0.32%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 12-07-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."
CVSS metrics
1 score · 1 source · 1 versionLow 3.3Preferred score · NVD (NIST)
AV:L/AC:M/Au:N/C:N/I:P/A:PSourcesSingle source
EPSS trend
Probability
0.32%
Chance of exploitation in the next 30 days
Percentile
24%
Versus all other CVEs
30-day change
0.00 pp
From 0.32% on 21-09-2026
21-09-202621-10-2026
EPSS score0.32%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (cgit.freedesktop.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian1 product
- systemd< 44-1
Linux1 product
- systemd43
Opensuse1 product
- systemd-ui&distro=openSUSE Tumbleweed< 3-1.8
3 vendors · 3 products
References
7 links- cgit.freedesktop.org/systemd/systemd/commit/?id=5ebff5337594d690b322078c512eb222d34aaa82X Refsource CONFIRMExploitPatch
- bugzilla.redhat.com/show_bug.cgi?id=803358X Refsource MISC
- lists.fedoraproject.org/pipermail/package-announce/2012-April/079075.htmlVendor AdvisoryX Refsource FEDORA
