{"id":134114,"date":"2019-02-11T10:28:00","date_gmt":"2019-02-11T02:28:00","guid":{"rendered":"https:\/\/lrxjmw.cn\/?p=134114"},"modified":"2019-01-14T10:28:51","modified_gmt":"2019-01-14T02:28:51","slug":"linux-systemd-privilege","status":"publish","type":"post","link":"https:\/\/lrxjmw.cn\/linux-systemd-privilege.html","title":{"rendered":"Linux\u7ec4\u4ef6Systemd\u4e2d\u5b58\u5728Privilege Escalation\u6f0f\u6d1e"},"content":{"rendered":"<p>\u5b89\u5168\u7814\u7a76\u4eba\u5458\u6700\u8fd1\u5728Systemd\u4e2d\u53d1\u73b0\u4e86\u4e00\u4e2a\u6f0f\u6d1e\uff0c\u5b83\u662fLinux\u7cfb\u7edf\u7684\u6838\u5fc3\u7ec4\u4ef6\uff0c\u5b83\u5229\u7528root\u6743\u9650\u5e76\u7a83\u53d6\u673a\u5bc6\u4fe1\u606f\u3002<\/p>\n<p>\u5305\u62ec\u5185\u5b58\u635f\u574fCVE-2018-16864\u548cCVE-2018-16865\u4ee5\u53ca\u4fe1\u606f\u6cc4\u9732CVE-2018-16866\u3002 \u76ee\u524d\uff0c\u8be5\u6f0f\u6d1e\u4ec5\u63d0\u4ea4\uff0c\u4f46POC\u5c1a\u672a\u53d1\u5e03\u3002 \u7814\u7a76\u4eba\u5458\u8868\u793a\u5c06\u516c\u5e03POC\u8fdb\u884c\u5206\u6790\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-134115\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2019\/01\/19011221087251.jpg\" alt=\"\" width=\"636\" height=\"249\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2019\/01\/19011221087251.jpg 636w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2019\/01\/19011221087251-300x117.jpg 300w\" sizes=\"auto, (max-width: 636px) 100vw, 636px\" \/><\/p>\n<p>Linux\u6838\u5fc3\u7ec4\u4ef6Systemd\u5b58\u5728Privilege Escalation\u6f0f\u6d1e<\/p>\n<p>\u7814\u7a76\u4eba\u5458\u5199\u9053\uff0c\u201c\u6211\u4eec\u4e3aCVE-2018-16865\u548cCVE-2018-16866\u5f00\u53d1\u4e86\u4e00\u4e2a\u6f0f\u6d1e\uff0c\u5b83\u5728i386\u4e0a\u83b7\u5f97\u4e8610\u5206\u949f\u7684\u672c\u5730root shell\uff0c\u5e73\u5747\u5728amd64\u4e0a\u83b7\u5f9770\u5206\u949f\u3002\u201d\u8fd9\u4e9b\u6f0f\u6d1e\u5f71\u54cd\u6240\u6709\u57fa\u4e8esystemd\u7684\u6f0f\u6d1e Linux\u53d1\u884c\u7248\uff0c\u5305\u62ecRedhat\u548cDebian\u3002 \u4f46\u662f\uff0cSUSE Linux Enterprise 15\/openSUSE Leap 15\u548cFedora 28\/29\u4e0d\u53d7\u6b64\u6f0f\u6d1e\u7684\u5f71\u54cd\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5b89\u5168\u7814\u7a76\u4eba\u5458\u6700\u8fd1\u5728Systemd\u4e2d\u53d1\u73b0\u4e86\u4e00\u4e2a\u6f0f\u6d1e\uff0c\u5b83\u662fLinux\u7cfb\u7edf\u7684\u6838\u5fc3\u7ec4\u4ef6\uff0c\u5b83\u5229\u7528root\u6743\u9650\u5e76\u7a83\u53d6\u673a\u5bc6\u4fe1 [&hellip;]<\/p>\n","protected":false},"author":1476,"featured_media":79616,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[21],"tags":[],"class_list":["post-134114","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/134114","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/users\/1476"}],"replies":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/comments?post=134114"}],"version-history":[{"count":2,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/134114\/revisions"}],"predecessor-version":[{"id":134152,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/134114\/revisions\/134152"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/media\/79616"}],"wp:attachment":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/media?parent=134114"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/categories?post=134114"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/tags?post=134114"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}