CVE-2017-1000082: systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g.

Security readout for executives and security teams

systemd v233 and earlier could mis-handle service usernames that begin with a digit. A service expected to run as a restricted account, such as a numeric-leading username, could instead run as root. Business risk depends on whether affected systems use this uncommon account naming pattern in service units. Exposure is most likely on Linux systems running systemd v233 or earlier with service units configured to run under usernames starting with numeric digits. Systems without that naming pattern are less likely to be directly exposed based on the provided sources. Prioritize validation on older Linux servers and appliances using systemd. The risk is configuration-specific, but a vulnerable service running as root can materially increase compromise impact. Mitigation focus: Identify systems running systemd v233 or earlier.; Audit service units for User values beginning with digits.; Check Linux distribution advisories for patched systemd packages..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.