CVE-2018-6954
libnss-myhostname: systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows loc...
CVE-2018-6954 is fixed in 14 products on 1 platform, first by libnss-myhostname 237-3ubuntu10.9, released February 12, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0053
44th percentile
systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protected_symlinks sysctl is turned on.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libnss-myhostname · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | libnss-myhostname 237-3ubuntu10.9 | Feb 12, 2018 |
| libnss-mymachines · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | libnss-mymachines 237-3ubuntu10.9 | Feb 12, 2018 |
| libnss-resolve · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | libnss-resolve 237-3ubuntu10.9 | Feb 12, 2018 |
| libnss-systemd · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | libnss-systemd 237-3ubuntu10.9 | Feb 12, 2018 |
| libpam-systemd · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | libpam-systemd 237-3ubuntu10.9 | Feb 12, 2018 |
| libsystemd0 · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | libsystemd0 237-3ubuntu10.9 | Feb 12, 2018 |
| libudev1 · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | libudev1 237-3ubuntu10.9 | Feb 12, 2018 |
| systemd · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | systemd 237-3ubuntu10.9 | Feb 12, 2018 |
| systemd-container · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | systemd-container 237-3ubuntu10.9 | Feb 12, 2018 |
| systemd-coredump · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | systemd-coredump 237-3ubuntu10.9 | Feb 12, 2018 |
| systemd-journal-remote · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | systemd-journal-remote 237-3ubuntu10.9 | Feb 12, 2018 |
| systemd-sysv · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | systemd-sysv 237-3ubuntu10.9 | Feb 12, 2018 |
| systemd-tests · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | systemd-tests 237-3ubuntu10.9 | Feb 12, 2018 |
| udev · Ubuntu 18.04.6 LTS (bionic) | 237-3ubuntu10.9 | udev 237-3ubuntu10.9 | Feb 12, 2018 |