Every CVE Search/ Get API key

CVE-2012-1174

The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44,...

3.3 LowFix available

The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."

Exploit likelihood

0.32%Down 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.3

The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."

Record
CVE-2012-1174
CVSS 2.0
3.3 LowAV:L/AC:M/Au:N/C:N/I:P/A:P
Weakness
CWE-362
Updated
2026-11-02
CVE List No score

The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."

Record
CVE-2012-1174
Updated
2026-11-02
EUVDEUVD-2012-1204 No score

The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."

Record
EUVD-2012-1204
Updated
2026-11-03
GitHub AdvisoriesGHSA-mmfm-j35m-wr8v No score

The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44,...

The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."

Record
GHSA-mmfm-j35m-wr8v
Weakness
CWE-362
Updated
2026-11-02
OSV No score

The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."

Record
CVE-2012-1174
Updated
2026-11-02
OSVDEBIAN-CVE-2012-1174 No score

The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."

Record
DEBIAN-CVE-2012-1174
Updated
2026-11-02
OSVopenSUSE-SU-2024:10112-1 No score

systemd-ui-3-1.8 on GA media

These are all security issues fixed in the systemd-ui-3-1.8 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10112-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10356-1 No score

libsystemd0-228-17.1 on GA media

These are all security issues fixed in the libsystemd0-228-17.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10356-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
systemd
Debian:12
 before 44-1
44-1
systemd
Debian:13
 before 44-1
44-1
systemd
Debian:14
 before 44-1
44-1
systemd-ui
openSUSE:Tumbleweed
 before 3-1.8
3-1.8
systemd
openSUSE:Tumbleweed
 before 228-17.1
228-17.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-1174 is a low vulnerability (CVSS 3.3) in Linux Systemd, published July 12, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. Fixed in systemd 44-1.

References

Show 5 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open