CVE-2012-0871
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd,...
CVE-2012-0871 is a medium vulnerability (CVSS 6.3) in Systemd Project Systemd, published April 18, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. Fixed in systemd 43-1.
- Severity
- 6.3 MediumCVSS 2.0, NVD
- Exploit chance
- 0.35%EPSS, 29th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
43-1systemd +2 more
Description
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
- Record
CVE-2012-0871- CVSS 2.0
- 6.3 Medium
AV:L/AC:M/Au:N/C:N/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE ListNo score
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
- Record
CVE-2012-0871- Updated
- 2026-11-02
EUVDEUVD-2012-0896No score
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
- Record
EUVD-2012-0896- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jv9q-v37q-34vvNo score
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd,...
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
- Record
GHSA-jv9q-v37q-34vv- Weakness
- CWE-59
- Updated
- 2026-11-02
OSVNo score
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
- Record
CVE-2012-0871- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0871No score
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
- Record
DEBIAN-CVE-2012-0871- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
lists.opensuse.org/opensuse-security-announce/2012-02/msg00030.html
cgit.freedesktop.org/systemd/systemd/commit?id=fc3c1c6e091ea16ad5600b145201ec535bbb5d7c
bugzilla.redhat.com/show_bug.cgi?id=795853
bugzilla.novell.com/show_bug.cgi?id=747154
osvdb.org/79768
nvd.nist.gov/vuln/detail/CVE-2012-0871
github.com/advisories/GHSA-jv9q-v37q-34vv
security-tracker.debian.org/tracker/CVE-2012-0871