CVE-2020-13776
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges whe…
Published Jun 3, 2020 · updated Oct 14, 2026 · systemd project systemd
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
Timeline
Detection, updates, and resolution for this record.
Jun 3, 2020 · NIST NVD
Detected
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
Oct 14, 2026 · NIST NVD
Updated
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.
Affected
- cpe fedoraproject/fedora32
- cpe netapp/active iq unified managerversion unspecified
- cpe netapp/solidfire & hci management nodeversion unspecified
- cpe systemd project/systemdversion unspecified
Sources
- CVE.orgCVE-2020-13776
Official CVE identifier
cve.org - NIST NVDCVE-2020-13776
systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-
nvd.nist.gov