CVE-2016-10156: systemd_project systemd

Modified

AliasesSUSE-SU-2017:0279-1UBUNTU-CVE-2016-10156DEBIAN-CVE-2016-10156

Published 23-01-2017Last modified 06-08-2024

Vulnerability summary

CVE-2016-10156 is a high (CVSS 7.8) vulnerability in systemd_project systemd. EPSS estimates a 1.21% chance of exploitation in the next 30 days, higher than 68.6% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (exploit-database, 24-01-2017)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.0 (NVD)

EPSS score

1.21%

0%100%

Low · -0.01 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2024:11420-1

Timeline

23-01-2017
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.07.8v2.07.2

EPSS trend

Probability

1.21%

Chance of exploitation in the next 30 days

Percentile

69%

Versus all other CVEs

30-day change

Decrease -0.01 pp

From 1.22% on 05-10-2026

05-10-202604-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databaselocallinuxUnverified
Systemd 228 (SUSE 12 SP2 / Ubuntu Touch 15.04) - Local Privilege Escalation
Maturity: poc

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Suse5 products

systemd&distro=SUSE Linux Enterprise Desktop 12 SP2< 228-132.1
systemd&distro=SUSE Linux Enterprise Server 12 SP2< 228-132.1
systemd&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2< 228-132.1
systemd&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2< 228-132.1
systemd&distro=SUSE Linux Enterprise Software Development Kit 12 SP2< 228-132.1

Debian1 product

systemd< 229-1

Systemd_project1 product

systemd228

Ubuntu1 product

systemd< 229-4ubuntu16

4 vendors · 8 products

References

16 links

github.com/systemd/systemd/commit/06eeacb6fe029804f296b065b3ce91e796e1cd0eX Refsource MISCIssue TrackingPatchThird Party Advisory
bugzilla.suse.com/show_bug.cgi?id=1020601X Refsource MISCIssue Tracking
www.securitytracker.com/id/1037686VDB EntryX Refsource SECTRACK
www.exploit-db.com/exploits/41171/ExploitX Refsource EXPLOIT DB
www.securityfocus.com/bid/95790VDB EntryX Refsource BIDThird Party Advisory
github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2fX Refsource MISCIssue TrackingPatchThird Party Advisory
www.suse.com/support/update/announcement/2017/suse-su-20170279-1/Advisory
bugzilla.suse.com/1012266REPORT
bugzilla.suse.com/1014560REPORT
bugzilla.suse.com/1014566REPORT

Show all 16 references

bugzilla.suse.com/1020601REPORT
bugzilla.suse.com/997682REPORT
www.suse.com/security/cve/CVE-2016-10156WEB
ubuntu.com/security/CVE-2016-10156REPORT
www.cve.org/CVERecord?id=CVE-2016-10156REPORT
security-tracker.debian.org/tracker/CVE-2016-10156Advisory