PatchFirst · Свежие уязвимости
За последние 30 дней в systemd опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 2
In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in some particular configurations, to set a XDG_SEAT environment variable which allows for commands to be checked against polkit policies using the "allow_active" element rather than "allow_any".
In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.