A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.
Version | Score | Severity | Vector String |
---|---|---|---|
3.0 | 7.8 | High | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Product | Vendor | Version |
---|---|---|
systemd | systemd | <= * |