A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-develUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-testsUpgrade systemd | Sep 9, 2022 | Aug 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade systemd-sysvUpgrade libgudev1Upgrade systemd-networkdUpgrade systemd-pythonUpgrade libgudev1-develUpgrade systemd-develUpgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-journal-gatewayUpgrade systemdUpgrade systemd-resolved | Oct 11, 2022 | Sep 9, 2022 |
| Centos_linux | — | Upgrade systemd-pamUpgrade systemd-container-debuginfoUpgrade systemd-udevUpgrade systemd-sysvUpgrade systemd-debugsourceUpgrade systemd-libs-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-journal-remoteUpgrade libgudev1-develUpgrade systemd-pam-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-testsUpgrade systemd-containerUpgrade systemd-networkdUpgrade systemd-udev-debuginfoUpgrade systemd-pythonUpgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-journal-gatewayUpgrade systemd-develUpgrade libgudev1Upgrade systemdUpgrade systemd-resolved | Aug 26, 2022 | Aug 24, 2022 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-udev-compatUpgrade systemdUpgrade systemd-libsUpgrade systemd-develUpgrade libgudev1 | Oct 11, 2022 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-containerUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-udev-compat | Feb 9, 2023 | Sep 9, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade systemd-libsUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemd-networkdUpgrade systemdUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-tests | Aug 26, 2022 | Aug 19, 2022 |
| Redhat_linux | — | Upgrade systemd-develUpgrade systemd-resolvedUpgrade libgudev1-develUpgrade systemd-journal-remoteUpgrade systemd-debugsourceUpgrade systemd-networkdUpgrade systemd-pam-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-pamUpgrade systemdUpgrade systemd-udev-debuginfoUpgrade systemd-container-debuginfoUpgrade libgudev1Upgrade systemd-udevUpgrade systemd-journal-remote-debuginfoUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-libs-debuginfoUpgrade systemd-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-testsUpgrade systemd-containerUpgrade systemd-libs | Aug 26, 2022 | Aug 24, 2022 |
| Rocky_linux | — | Upgrade systemd-testsUpgrade systemd-debuginfoUpgrade systemdUpgrade systemd-udevUpgrade systemd-udev-debuginfoUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-develUpgrade systemd-container-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-debugsourceUpgrade systemd-tests-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-containerUpgrade systemd-journal-remote | Sep 6, 2022 | Sep 1, 2022 |
| Ubuntu | — | Upgrade systemd | Aug 30, 2022 | Aug 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub