CVE-2017-1000082

systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with root privileges rather than the user intended.

References

Affected packages

Git / github.com/systemd/systemd

Affected ranges

Type

GIT

Repo

https://github.com/systemd/systemd

Events

Introduced

95adafc428b5b4be0ddd4d43a7b96658390388bc

Fixed

c1edab7ad1e7ccc9be693bedfd464cd1cbffb395

Database specific

{
    "versions": [
        {
            "introduced": "229"
        },
        {
            "fixed": "234"
        }
    ]
}

Affected versions

Other

v229

v230

v231

v232

v233

Database specific

vanir_signatures_modified

"2026-04-11T03:57:11Z"

vanir_signatures

[
    {
        "id": "CVE-2017-1000082-7e6b8cdb",
        "target": {
            "file": "src/resolve/resolved-link.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "339871869838803153051055902004799267930",
                "47880862143882353179430444680707987566",
                "179348090747108299855650915917964705253",
                "136841021661832160439555539809046161213",
                "70537985977691108021810521774370618903",
                "215227070963796631390794686053576798912",
                "263860212642674524844333841202947958869",
                "221176959145172472265756469225640482754"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/systemd/systemd/commit/c1edab7ad1e7ccc9be693bedfd464cd1cbffb395",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2017-1000082-aea10c71",
        "target": {
            "file": "src/resolve/resolved-link.c",
            "function": "link_relevant"
        },
        "deprecated": false,
        "digest": {
            "function_hash": "163471998790887894249902205286491078172",
            "length": 823.0
        },
        "signature_type": "Function",
        "source": "https://github.com/systemd/systemd/commit/c1edab7ad1e7ccc9be693bedfd464cd1cbffb395",
        "signature_version": "v1"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000082.json"