CVE-2017-1000082

Critical

Published: 07/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

systemd v233 and earlier fails to safely parse usernames starting with a numeric digit, resulting in the service running with root privileges instead of the intended user privileges.

Risk Assessment

The organization may be exposed to unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update systemd to the latest version to eliminate this vulnerability and review and adjust usernames in the system.

Original NVD description (English source)

systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with root privileges rather than the user intended.