A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation of the class parameter in the RegisterMachine D-Bus (Desktop Bus) method. A local unprivileged user can exploit this by attempting to register a machine with a specific class value, which may leave behind a usable, attacker-controlled machine object. This allows the attacker to invoke methods on the privileged object, leading to the execution of arbitrary commands with root privileges on the host system.
{
"binaries": [
{
"binary_name": "libnss-myhostname",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "libnss-mymachines",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "libnss-resolve",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "libnss-systemd",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "libpam-systemd",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "libsystemd-dev",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "libsystemd0",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "libudev-dev",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "libudev1",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "systemd",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "systemd-container",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "systemd-coredump",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "systemd-journal-remote",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "systemd-oomd",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "systemd-repart",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "systemd-standalone-sysusers",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "systemd-standalone-tmpfiles",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "systemd-sysv",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "systemd-tests",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "systemd-timesyncd",
"binary_version": "249.11-0ubuntu3.17"
},
{
"binary_name": "udev",
"binary_version": "249.11-0ubuntu3.17"
}
]
}{
"binaries": [
{
"binary_name": "libnss-myhostname",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "libnss-mymachines",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "libnss-resolve",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "libnss-systemd",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "libpam-systemd",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "libsystemd-dev",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "libsystemd-shared",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "libsystemd0",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "libudev-dev",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "libudev1",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-boot",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-boot-efi",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-container",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-coredump",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-dev",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-homed",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-journal-remote",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-oomd",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-resolved",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-standalone-sysusers",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-standalone-tmpfiles",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-sysv",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-tests",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-timesyncd",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-ukify",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "systemd-userdbd",
"binary_version": "255.4-1ubuntu8.12"
},
{
"binary_name": "udev",
"binary_version": "255.4-1ubuntu8.12"
}
]
}{
"binaries": [
{
"binary_name": "libnss-myhostname",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "libnss-mymachines",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "libnss-resolve",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "libnss-systemd",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "libpam-systemd",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "libsystemd-dev",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "libsystemd-shared",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "libsystemd0",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "libudev-dev",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "libudev1",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-boot",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-boot-efi",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-boot-tools",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-container",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-coredump",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-cryptsetup",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-dev",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-homed",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-journal-remote",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-oomd",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-repart",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-resolved",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-standalone-shutdown",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-standalone-sysusers",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-standalone-tmpfiles",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-sysv",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-tests",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-timesyncd",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-ukify",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "systemd-userdbd",
"binary_version": "257.9-0ubuntu2.1"
},
{
"binary_name": "udev",
"binary_version": "257.9-0ubuntu2.1"
}
]
}{
"binaries": [
{
"binary_name": "gir1.2-gudev-1.0",
"binary_version": "1:204-5ubuntu20.31+esm2"
},
{
"binary_name": "libgudev-1.0-0",
"binary_version": "1:204-5ubuntu20.31+esm2"
},
{
"binary_name": "libgudev-1.0-dev",
"binary_version": "1:204-5ubuntu20.31+esm2"
},
{
"binary_name": "libpam-systemd",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "libsystemd-daemon-dev",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "libsystemd-daemon0",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "libsystemd-id128-0",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "libsystemd-id128-dev",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "libsystemd-journal-dev",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "libsystemd-journal0",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "libsystemd-login-dev",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "libsystemd-login0",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "libudev-dev",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "libudev1",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "python-systemd",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "systemd",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "systemd-services",
"binary_version": "204-5ubuntu20.31+esm2"
},
{
"binary_name": "udev",
"binary_version": "204-5ubuntu20.31+esm2"
}
]
}{
"binaries": [
{
"binary_name": "libnss-myhostname",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "libnss-mymachines",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "libnss-resolve",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "libpam-systemd",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "libsystemd-dev",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "libsystemd0",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "libudev-dev",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "libudev1",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "systemd",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "systemd-container",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "systemd-coredump",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "systemd-journal-remote",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "systemd-sysv",
"binary_version": "229-4ubuntu21.31+esm3"
},
{
"binary_name": "udev",
"binary_version": "229-4ubuntu21.31+esm3"
}
]
}{
"binaries": [
{
"binary_name": "libnss-myhostname",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "libnss-mymachines",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "libnss-resolve",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "libnss-systemd",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "libpam-systemd",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "libsystemd-dev",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "libsystemd0",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "libudev-dev",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "libudev1",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "systemd",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "systemd-container",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "systemd-coredump",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "systemd-journal-remote",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "systemd-sysv",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "systemd-tests",
"binary_version": "237-3ubuntu10.57+esm2"
},
{
"binary_name": "udev",
"binary_version": "237-3ubuntu10.57+esm2"
}
]
}{
"binaries": [
{
"binary_name": "libnss-myhostname",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "libnss-mymachines",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "libnss-resolve",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "libnss-systemd",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "libpam-systemd",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "libsystemd-dev",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "libsystemd0",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "libudev-dev",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "libudev1",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "systemd",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "systemd-container",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "systemd-coredump",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "systemd-journal-remote",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "systemd-sysv",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "systemd-tests",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "systemd-timesyncd",
"binary_version": "245.4-4ubuntu3.24+esm1"
},
{
"binary_name": "udev",
"binary_version": "245.4-4ubuntu3.24+esm1"
}
]
}