CVE-2016-10156
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created...
CVE-2016-10156 is a high vulnerability (CVSS 7.8) in Systemd Project Systemd, published January 23, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.21%, the 68th percentile. Fixed in systemd 229-1.
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
- Record
CVE-2016-10156- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
- Record
CVE-2016-10156- Updated
- 2026-11-02
EUVDEUVD-2016-1344 No score
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
- Record
EUVD-2016-1344- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4r87-5wgm-7h7m
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created...
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
- Record
GHSA-4r87-5wgm-7h7m- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
- Record
CVE-2016-10156- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-10156
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
- Record
DEBIAN-CVE-2016-10156- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-10156
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.
- Record
UBUNTU-CVE-2016-10156- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11420-1 No score
libsystemd0-249.4-2.2 on GA media
These are all security issues fixed in the libsystemd0-249.4-2.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11420-1- Updated
- 2026-11-02
OSVSUSE-SU-2017:0279-1 No score
Security update for systemd
This update for systemd fixes the following issues:
This security issue was fixed:
- CVE-2016-10156: Fix permissions set on permanent timer timestamp files, preventing local unprivileged users from escalating privileges (bsc#1020601).
These non-security issues were fixed:
- Fix permission set on /var/lib/systemd/linger/*
- install: follow config_path symlink (#3362)
- install: fix disable when /etc/systemd/system is a symlink (bsc#1014560)
- run: make --slice= work in conjunction with --scope (bsc#1014566)
- core: don't dispatch load queue when setting Slice= for transient units
- systemctl: remove duplicate entries showed by list-dependencies (#5049) (bsc#1012266)
- rule: don't automatically online standby memory on s390x (bsc#997682)
- Record
SUSE-SU-2017:0279-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
systemdDebian:12 |
before 229-1 | 229-1 |
systemdDebian:13 |
before 229-1 | 229-1 |
systemdDebian:14 |
before 229-1 | 229-1 |
systemdSUSE:Linux Enterprise Desktop 12 SP2 |
before 228-132.1 | 228-132.1 |
systemdSUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 |
before 228-132.1 | 228-132.1 |
systemdSUSE:Linux Enterprise Software Development Kit 12 SP2 |
before 228-132.1 | 228-132.1 |
systemdSUSE:Linux Enterprise Server 12 SP2 |
before 228-132.1 | 228-132.1 |
systemdSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 228-132.1 | 228-132.1 |
systemdopenSUSE:Tumbleweed |
before 249.4-2.2 | 249.4-2.2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Systemd 228 (SUSE 12 SP2 / Ubuntu Touch 15.04) - Local Privilege Escalation | 2017-01-24 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
github.com/systemd/systemd/commit/06eeacb6fe029804f296b065b3ce91e796e1cd0e
bugzilla.suse.com/show_bug.cgi?id=1020601
securitytracker.com/id/1037686
exploit-db.com/exploits/41171
securityfocus.com/bid/95790
Show 30 moreShow less
nvd.nist.gov/vuln/detail/CVE-2016-10156
security-tracker.debian.org/tracker/CVE-2016-10156
suse.com/support/update/announcement/2017/suse-su-20170279-1
ubuntu.com/security/CVE-2016-10156
cve.org/CVERecord?id=CVE-2016-10156