CVE-2019-3843

EIP tracks 1 public exploit for CVE-2019-3843.

AI-analyzed exploit summary This exploit demonstrates a vulnerability in systemd's DynamicUser feature, where a service can create a setuid binary outside its mount namespace by receiving a file descriptor via a UNIX domain socket from a collaborating user. The PoC includes two C programs to exploit this flaw and achieve privilege escalation.

It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.