CVE-2017-18078: debian debian_linux
Vulnerability summary
CVE-2017-18078 is a high (CVSS 7.8) vulnerability in debian debian_linux. EPSS estimates a 1.06% chance of exploitation in the next 30 days, higher than 64.7% of scored vulnerabilities. 4 public exploits are recorded.
Public exploit (exploit-database, 29-01-2018)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 29-01-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protected_hardlinks sysctl is turned off, which allows local users to bypass intended access restrictions via vectors involving a hard link to a file for which the user lacks write access, as demonstrated by changing the ownership of the /etc/passwd file.
CVSS metrics
6 scores · 4 sources · 3 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · ChainguardEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
1.06%
Chance of exploitation in the next 30 days
Percentile
65%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.06% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
4 foundSystemd
Maturity: poc
Exploit Reference (openwall.com)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Suse9 products
- systemd&distro=SUSE Linux Enterprise Desktop 12 SP2< 228-150.32.1
- systemd&distro=SUSE Linux Enterprise Desktop 12 SP3< 228-150.32.1
- systemd&distro=SUSE Linux Enterprise Server 12 SP2< 228-150.32.1
- systemd&distro=SUSE Linux Enterprise Server 12 SP3< 228-150.32.1
- systemd&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2< 228-150.32.1
Chainguard5 products
- py3-systemdAll versions (No fix recorded)
- py3.10-systemdAll versions (No fix recorded)
- py3.11-systemdAll versions (No fix recorded)
- py3.12-systemdAll versions (No fix recorded)
- py3.13-systemdAll versions (No fix recorded)
Debian2 products
- systemd< 237-1
- debian_linuxEOL8.0
Opensuse1 product
- leapEOL42.3
Systemd_project1 product
- systemd< 237
Ubuntu1 product
- systemdAll versions (No fix recorded)
6 vendors · 19 products
References
20 links- lists.opensuse.org/opensuse-updates/2018-02/msg00109.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party AdvisoryAdvisory
- www.openwall.com/lists/oss-security/2018/01/29/3Mailing ListX Refsource MLISTExploitThird Party AdvisoryEVIDENCE
- www.exploit-db.com/exploits/43935/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB EntryEVIDENCE
- github.com/systemd/systemd/issues/7736X Refsource MISCExploitIssue TrackingThird Party AdvisoryREPORT
- packetstormsecurity.com/files/146184/systemd-Local-Privilege-Escalation.htmlX Refsource MISCExploitThird Party AdvisoryVDB EntryEVIDENCE
- www.openwall.com/lists/oss-security/2018/01/29/4Mailing ListX Refsource MLISTThird Party AdvisoryAdvisory
lists.debian.org/debian-lts-announce/2019/04/msg00022.htmlMailing ListX Refsource MLISTThird Party AdvisoryAdvisory