CVE-2019-3843

Advisory lineage Upstream: 0 Downstream: 7
Modified
Published: 26 Apr 2019, 20:27
Last modified:09 Jun 2025, 15:49

Vulnerability Summary

Overall Risk (default)
medium
41/100
CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
0.12% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

26 Apr 2019, 20:27
Published
Vulnerability first disclosed
09 Jun 2025, 15:49
Last Modified
Vulnerability information updated

Description

It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v3.0•MEDIUM•Score: 4.5CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
  • v2.0•MEDIUM•Score: 4.6AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.12%• Percentile: 31%

Techniques & Countermeasures

  • CWE-266•Incorrect Privilege Assignment

    A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

  • CWE-269•Improper Privilege Management

    The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Systems

  • canonical•ubuntu_linux

    16.04 | 18.04 | 19.10

  • fedoraproject•fedora

    30

  • [freedesktop.org]•systemd

    242

  • netapp•cn1610_firmware

    na

  • netapp•hci_management_node

    na

  • netapp•snapprotect

    na

  • netapp•solidfire

    na

  • systemd_project•systemd

    < 242

References (7)