Every CVE Search/ Get API key

CVE-2020-13776

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x...

6.7 MediumFix available

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.46%Down 0.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.7

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

Record
CVE-2020-13776
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.2 MediumAV:L/AC:H/Au:N/C:C/I:C/A:C
Weakness
CWE-269
Updated
2026-11-02
CVE List 6.7

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

Record
CVE-2020-13776
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-269
Updated
2026-11-02
EUVDEUVD-2020-5993 6.7

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

Record
EUVD-2020-5993
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-g2fm-j5p3-x5h7 6.7

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x...

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

Record
GHSA-g2fm-j5p3-x5h7
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-269
Updated
2026-11-02
OSV 6.7

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

Record
CVE-2020-13776
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-13776 6.7

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

Record
DEBIAN-CVE-2020-13776
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVOESA-2022-1538 6.7

systemd security update

systemd is a system and service manager that runs as PID 1 and starts the rest of the system.

Security Fix(es):

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.(CVE-2020-13776)

Record
OESA-2022-1538
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:1611 6.7

Red Hat Security Advisory: systemd security, bug fix, and enhancement update

Record
RHSA-2021:1611
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3900 6.7

Red Hat Security Advisory: systemd security update

Record
RHSA-2021:3900
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2021:1611 6.7

Moderate: systemd security, bug fix, and enhancement update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es):

  • systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any" (CVE-2019-3842)

  • systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits (CVE-2020-13776)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.

Record
RLSA-2021:1611
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-13776 6.7

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

Record
UBUNTU-CVE-2020-13776
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2021-0304 No score

Updated systemd packages fix a security vulnerability

A flaw was found in systemd, where it mishandles numerical usernames beginning with decimal digits, or "0x" followed by hexadecimal digits. When the usernames are used by systemd, for example in service units, an unexpected user may be used instead. In some particular configurations, this flaw allows local attackers to elevate their privileges (CVE-2020-13776).

Record
MGASA-2021-0304
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
systemd
Debian:12
 before 246-2
246-2
systemd
Debian:13
 before 246-2
246-2
systemd
Debian:14
 before 246-2
246-2
systemd
Mageia:7
 before 241-8.6.mga7
241-8.6.mga7
systemd
openEuler:20.03-LTS-SP1
 before 243-50.oe1
243-50.oe1
systemd
openEuler:20.03-LTS-SP2
 before 243-51.oe1
243-51.oe1
systemd
openEuler:20.03-LTS-SP3
 before 243-54.oe1
243-54.oe1
systemd
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-container
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-container-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
Show 34 moreShow less
Affected packages
PackageAffectedFixed
systemd-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-journal-remote
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-journal-remote-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-pam
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-pam-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-tests
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-tests-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-udev
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd-udev-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-container
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-container-debuginfo
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-debuginfo
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-debugsource
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-devel
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-journal-remote
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-journal-remote-debuginfo
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-libs
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-libs-debuginfo
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-pam
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-pam-debuginfo
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-tests
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-tests-debuginfo
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-udev
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd-udev-debuginfo
Red Hat:rhel_eus:8.2::baseos
From an advisory covering 2 CVEs
 before 0:239-31.el8_2.7
0:239-31.el8_2.7
systemd
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:239-45.el8
0:239-45.el8
systemd
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
204-0ubuntu18204-0ubuntu19204-5ubuntu3204-5ubuntu5204-5ubuntu6
Show 40 moreShow less
204-5ubuntu7204-5ubuntu8204-5ubuntu9204-5ubuntu10204-5ubuntu11204-5ubuntu13204-5ubuntu14204-5ubuntu15204-5ubuntu16204-5ubuntu17204-5ubuntu18204-5ubuntu19204-5ubuntu20204-5ubuntu20.2204-5ubuntu20.3204-5ubuntu20.4204-5ubuntu20.5204-5ubuntu20.6204-5ubuntu20.7204-5ubuntu20.8204-5ubuntu20.9204-5ubuntu20.10204-5ubuntu20.11204-5ubuntu20.12204-5ubuntu20.13204-5ubuntu20.14204-5ubuntu20.15204-5ubuntu20.18204-5ubuntu20.19204-5ubuntu20.20204-5ubuntu20.21204-5ubuntu20.22204-5ubuntu20.24204-5ubuntu20.25204-5ubuntu20.26204-5ubuntu20.28204-5ubuntu20.29204-5ubuntu20.31204-5ubuntu20.31+esm2204-5ubuntu20.31+esm3
 None known
systemd
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
225-1ubuntu9227-2ubuntu1227-2ubuntu2228-1ubuntu2228-2ubuntu1
Show 45 moreShow less
228-2ubuntu2228-3ubuntu1228-4ubuntu1228-4ubuntu2228-5ubuntu1228-5ubuntu2228-5ubuntu3228-6ubuntu1229-1ubuntu2229-1ubuntu4229-2ubuntu1229-3ubuntu1229-3ubuntu2229-4ubuntu1229-4ubuntu4229-4ubuntu5229-4ubuntu6229-4ubuntu7229-4ubuntu8229-4ubuntu10229-4ubuntu11229-4ubuntu12229-4ubuntu13229-4ubuntu16229-4ubuntu17229-4ubuntu19229-4ubuntu20229-4ubuntu21229-4ubuntu21.1229-4ubuntu21.2229-4ubuntu21.3229-4ubuntu21.4229-4ubuntu21.5229-4ubuntu21.6229-4ubuntu21.8229-4ubuntu21.9229-4ubuntu21.10229-4ubuntu21.15229-4ubuntu21.16229-4ubuntu21.17229-4ubuntu21.19229-4ubuntu21.21229-4ubuntu21.22229-4ubuntu21.23229-4ubuntu21.27
 None known
systemd
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
234-2ubuntu12235-2ubuntu3235-3ubuntu2235-3ubuntu3237-3ubuntu3
Show 45 moreShow less
237-3ubuntu4237-3ubuntu6237-3ubuntu7237-3ubuntu8237-3ubuntu10237-3ubuntu10.2237-3ubuntu10.3237-3ubuntu10.4237-3ubuntu10.6237-3ubuntu10.9237-3ubuntu10.11237-3ubuntu10.12237-3ubuntu10.13237-3ubuntu10.15237-3ubuntu10.17237-3ubuntu10.19237-3ubuntu10.20237-3ubuntu10.21237-3ubuntu10.22237-3ubuntu10.23237-3ubuntu10.24237-3ubuntu10.25237-3ubuntu10.26237-3ubuntu10.28237-3ubuntu10.29237-3ubuntu10.31237-3ubuntu10.33237-3ubuntu10.38237-3ubuntu10.39237-3ubuntu10.40237-3ubuntu10.41237-3ubuntu10.42237-3ubuntu10.43237-3ubuntu10.44237-3ubuntu10.45237-3ubuntu10.46237-3ubuntu10.47237-3ubuntu10.48237-3ubuntu10.49237-3ubuntu10.50237-3ubuntu10.51237-3ubuntu10.52237-3ubuntu10.53237-3ubuntu10.54237-3ubuntu10.56
 None known
systemd
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
242-7ubuntu3243-2ubuntu1243-3ubuntu1244-3ubuntu1244.1-0ubuntu2
Show 34 moreShow less
244.1-0ubuntu3244.2-1ubuntu1244.3-1ubuntu1245.2-1ubuntu1245.2-1ubuntu2245.4-2ubuntu1245.4-4ubuntu1245.4-4ubuntu3245.4-4ubuntu3.1245.4-4ubuntu3.2245.4-4ubuntu3.3245.4-4ubuntu3.4245.4-4ubuntu3.5245.4-4ubuntu3.6245.4-4ubuntu3.7245.4-4ubuntu3.10245.4-4ubuntu3.11245.4-4ubuntu3.13245.4-4ubuntu3.14245.4-4ubuntu3.15245.4-4ubuntu3.16245.4-4ubuntu3.17245.4-4ubuntu3.18245.4-4ubuntu3.19245.4-4ubuntu3.20245.4-4ubuntu3.21245.4-4ubuntu3.22245.4-4ubuntu3.23245.4-4ubuntu3.24245.4-4ubuntu3.24+esm1245.4-4ubuntu3.24+esm3245.4-4ubuntu3.24+esm4245.4-4ubuntu3.24+esm5245.4-4ubuntu3.24+esm6
 None known

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-13776 is a medium vulnerability (CVSS 6.7) in Systemd Project Systemd, published June 3, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. Fixed in systemd 246-2.

References

Show 36 moreShow less
This page doesn't list everything

Left out here: 11 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open