systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. 0day), running the service in question with root privileges rather than the user intended. https://nvd.nist.gov/vuln/detail/CVE-2017-1000082