CVE-2017-1000082

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with root privileges rather than the user intended.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2017/07/02/1Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/99507Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038839Third Party Advisory, VDB Entry
https://github.com/systemd/systemd/issues/6237Issue Tracking, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/07/02/1Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/99507Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038839Third Party Advisory, VDB Entry
https://github.com/systemd/systemd/issues/6237Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Jul 7, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-10000837.8backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary com CVE-2017-10000846.5Parameterized Trigger Plugin fails to check Item/Build permission: The Parameterized Trigger Plugin did not check the build authentication i CVE-2017-10000856.5Subversion Plugin connects to a user-specified Subversion repository as part of form validation (e.g. to retrieve a list of tags). This func CVE-2017-10000868.0The Periodic Backup Plugin did not perform any permission checks, allowing any user with Overall/Read access to change its settings, trigger CVE-2017-10000874.3GitHub Branch Source provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use. Thi CVE-2017-10000885.4The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no CVE-2017-10000895.3Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in CVE-2017-10000908.8Role-based Authorization Strategy Plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Reques CVE-2017-10000916.3GitHub Branch Source Plugin connects to a user-specified GitHub API URL (e.g. GitHub Enterprise) as part of form validation and completion (CVE-2017-10000927.5Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to CVE-2017-10000938.8Poll SCM Plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Request Forgery attacks. This a CVE-2017-10000946.5Docker Commons Plugin provides a list of applicable credential IDs to allow users configuring a job to select the one they'd like to use to