{"id":"CVE-2016-10156","details":"A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.","modified":"2026-08-03T14:23:36.690840Z","published":"2017-01-23T07:59:00.347Z","related":["SUSE-SU-2017:0279-1","openSUSE-SU-2024:11420-1"],"references":[{"type":"WEB","url":"http://www.securitytracker.com/id/1037686"},{"type":"WEB","url":"https://www.exploit-db.com/exploits/41171/"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/95790"},{"type":"REPORT","url":"https://bugzilla.suse.com/show_bug.cgi?id=1020601"},{"type":"FIX","url":"https://github.com/systemd/systemd/commit/06eeacb6fe029804f296b065b3ce91e796e1cd0e"},{"type":"FIX","url":"https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2f"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/systemd/systemd","events":[{"introduced":"0"},{"fixed":"06eeacb6fe029804f296b065b3ce91e796e1cd0e"},{"fixed":"ee735086f8670be1591fa9593e80dd60163a7a2f"}],"database_specific":{"source":"REFERENCES"}}],"versions":["v228","v227","v226","v225","v224","v223","v222","v221","v219","v220","v218","v217","v216","v215","v214","v213","v212","v211","v210","v209","v208","v207","v206","v205","v204","v203","v202","v201","v200","v199","v198","v197","v196","v195","v194","v193","v192","v191","v190","v189","v188","v187","v186","v185","v184","v183","v44","v43","v42","v41","v40","v39","v38","v37","v36","v35","v34","v33","v32","v31","v30","v29","v28","v27","v26","v25","v24","v23","v22","v21","v20","v19","v18","v17","v16","v15","v14","v13","v12","v11","v10","v9","v8","v7","v6","v5","v4","v3","v2","v1"],"database_specific":{"vanir_signatures_modified":"2026-08-03T14:23:36Z","vanir_signatures":[{"source":"https://github.com/systemd/systemd/commit/06eeacb6fe029804f296b065b3ce91e796e1cd0e","target":{"file":"src/basic/fs-util.c","function":"touch_file"},"deprecated":false,"digest":{"function_hash":"208378130462840707615846514508483232653","length":777},"id":"CVE-2016-10156-0ea95390","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2f","target":{"file":"src/test/test-conf-files.c"},"deprecated":false,"digest":{"line_hashes":["143490046643793043951247385066281749424","122935519918159594852004239146072093699","54395448293350274193157192029626465405","319258269167257065855528611741500025477","14136216880443083922228792084368357903","308585633961784689412430179420870598457","128309604439848126161042702311541266943","151843754083868116041010403313887337385"],"threshold":0.9},"id":"CVE-2016-10156-14049a83"},{"digest":{"line_hashes":["884391527119032421930507393033943967","71444658684207020711684283464577893821","129040058516969266729007866096539935790","171985266963045669393736977086235467711","167028769458000049328164706596134535271","325425461498447324481272706372516446726","73487370959010915169797254673591995470","166827898435921037420828712229566259421"],"threshold":0.9},"id":"CVE-2016-10156-4267b89a","signature_type":"Line","signature_version":"v1","source":"https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2f","target":{"file":"src/core/timer.c"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2f","target":{"file":"src/basic/fs-util.c","function":"touch_file"},"deprecated":false,"digest":{"function_hash":"16651552642822266066331222789744711377","length":765},"id":"CVE-2016-10156-50486a66","signature_type":"Function"},{"target":{"file":"src/basic/fs-util.c","function":"touch"},"deprecated":false,"digest":{"function_hash":"202510193103278909526249463735252315663","length":126},"id":"CVE-2016-10156-743c9fdd","signature_type":"Function","signature_version":"v1","source":"https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2f"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/systemd/systemd/commit/06eeacb6fe029804f296b065b3ce91e796e1cd0e","target":{"file":"src/basic/fs-util.c"},"deprecated":false,"digest":{"line_hashes":["205574758964764086577373846803576665817","26172775453165720180949406021269219765","260867573201901865531530435359545172204","253223367683081464670724374397409422548"],"threshold":0.9},"id":"CVE-2016-10156-868d732b"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2f","target":{"file":"src/basic/fs-util.c"},"deprecated":false,"digest":{"line_hashes":["97400082154898398970675292924757582953","110083905208857346320650848691103642371","307475506367816187332214095585553537513","135927274798206812626501416543824620549","3601903755967494894851062893010901710","220389832517227226628827653175591840104","13230225266436895651077031958836395872","150678483076905833111675878602351293786"],"threshold":0.9},"id":"CVE-2016-10156-a191707d"},{"id":"CVE-2016-10156-a8fd9cc9","signature_type":"Function","signature_version":"v1","source":"https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2f","target":{"function":"setup_test_dir","file":"src/test/test-conf-files.c"},"deprecated":false,"digest":{"function_hash":"5821552094425570502963670811945135628","length":375}},{"id":"CVE-2016-10156-b754c4cb","signature_type":"Function","signature_version":"v1","source":"https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2f","target":{"file":"src/core/timer.c","function":"timer_enter_running"},"deprecated":false,"digest":{"function_hash":"5027209638548168649191285761072337226","length":693}},{"source":"https://github.com/systemd/systemd/commit/ee735086f8670be1591fa9593e80dd60163a7a2f","target":{"file":"src/core/timer.c","function":"timer_start"},"deprecated":false,"digest":{"length":749,"function_hash":"296421973068010747095949689944144467270"},"id":"CVE-2016-10156-b9e14642","signature_type":"Function","signature_version":"v1"}],"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-10156.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/systemd/systemd-stable","events":[{"introduced":"dd050decb6ad131ebdeabb71c4f9ecb4733269c0"},{"last_affected":"dd050decb6ad131ebdeabb71c4f9ecb4733269c0"}],"database_specific":{"source":"CPE_STRING","cpe":"cpe:2.3:a:systemd_project:systemd:228:*:*:*:*:*:*:*","extracted_events":[{"introduced":"228"},{"last_affected":"228"}]}}],"versions":["228","v228"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-10156.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}