CVE-2017-1000082: Systemd Project Systemd

Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days.

systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with root privileges rather than the user intended.

Affected products

• Systemd Project Systemd: from 229, before 234 (fixed in 234)

Published 2017-07-07. Last modified 2026-06-17.