CVE-2016-10156

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/95790Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037686
https://bugzilla.suse.com/show_bug.cgi?id=1020601Issue Tracking
https://github.com/systemd/systemd/commit/06eeacb6fe029804f296b065b3ce91e796e1cd0eIssue Tracking, Patch, Third Party Advisory
https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2fIssue Tracking, Patch, Third Party Advisory
https://www.exploit-db.com/exploits/41171/
http://www.securityfocus.com/bid/95790Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037686
https://bugzilla.suse.com/show_bug.cgi?id=1020601Issue Tracking
https://github.com/systemd/systemd/commit/06eeacb6fe029804f296b065b3ce91e796e1cd0eIssue Tracking, Patch, Third Party Advisory
https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2fIssue Tracking, Patch, Third Party Advisory
https://www.exploit-db.com/exploits/41171/

Timeline

Published: Jan 23, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-101579.8Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is ag CVE-2016-101587.5The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote atta CVE-2016-101597.5Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers CVE-2016-10168.8Use-after-free vulnerability in the Transform object implementation in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.CVE-2016-101609.8Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers CVE-2016-101617.5The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remo CVE-2016-101627.5The php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before 7.1.1 allows remote attackers to cause a de CVE-2016-101636.5Memory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS use CVE-2016-101649.8Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attack CVE-2016-101657.1The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial CVE-2016-101669.8Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows rem CVE-2016-101675.5The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a deni