Vulnerability Details : CVE-2023-26604
Potential exploit
systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.
Vulnerability category: Gain privilege
Products affected by CVE-2023-26604
- cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-26604
2.57%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 85 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-26604
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
134c704f-9b21-4f2e-91b3-4a467353bcc0 | 2025-03-07 |
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST | |
7.8
|
HIGH | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
N/A
|
N/A
|
Oracle:CPUOct2023 |
CWE ids for CVE-2023-26604
-
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.Assigned by: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
References for CVE-2023-26604
-
https://medium.com/@zenmoviefornotification/saidov-maxim-cve-2023-26604-c1232a526ba7
CVE-2023–26604. How did i find it? | by Zenmovie | Mar, 2023 | MediumExploit;Third Party Advisory
-
https://github.com/systemd/systemd/blob/main/NEWS#L4335-L4340
Release Notes
-
https://medium.com/%40zenmoviefornotification/saidov-maxim-cve-2023-26604-c1232a526ba7
CVE-2023–26604. How did i find it? | by Zenmovie | Medium
-
https://security.netapp.com/advisory/ntap-20230505-0009/
CVE-2023-26604 Systemd Vulnerability in NetApp Products | NetApp Product Security
-
http://packetstormsecurity.com/files/174130/systemd-246-Local-Root-Privilege-Escalation.html
systemd 246 Local Root Privilege Escalation ≈ Packet Storm
-
https://blog.compass-security.com/2012/10/dangerous-sudoers-entries-part-2-insecure-functionality/
Dangerous Sudoers Entries – PART 2: Insecure Functionality – Compass Security BlogExploit;Third Party Advisory
-
https://lists.debian.org/debian-lts-announce/2023/03/msg00032.html
[SECURITY] [DLA 3377-1] systemd security update
Jump to