systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges whe…

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Jun 3, 2020 · NIST NVD

   Detected

   systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

2. Oct 14, 2026 · NIST NVD

   Updated

   systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.

Affected

• cpe fedoraproject/fedora32
• cpe netapp/active iq unified managerversion unspecified
• cpe netapp/solidfire & hci management nodeversion unspecified
• cpe systemd project/systemdversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2020-13776

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2020-13776

  30-day exploitation probability 0.5%

  first.org
• NIST NVDVulnerability recordCVE-2020-13776

  systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-

  nvd.nist.gov

References

• Reference · cert-portal.siemens.com
• Issue Tracking · github.com
• Reference · lists.fedoraproject.org
• Third Party Advisory · security.netapp.com