An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-develUpgrade systemd-oomdUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-resolvedUpgrade systemd-rpm-macrosUpgrade systemd-testsUpgrade systemdUpgrade systemd-udevUpgrade systemd-journal-remote | Jan 17, 2023 | Nov 8, 2022 |
| Amazon Linux Ami 2 | — | Upgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-networkdUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-pythonUpgrade libgudev1Upgrade systemdUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-journal-gateway | Dec 7, 2022 | Nov 8, 2022 |
| Centos_linux | — | Upgrade systemd-resolvedUpgrade systemd-udev-debuginfoUpgrade systemd-libsUpgrade systemd-pam-debuginfoUpgrade systemd-containerUpgrade systemd-oomd-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-debuginfoUpgrade systemd-oomdUpgrade systemd-journal-remote-debuginfoUpgrade systemd-develUpgrade systemd-devel-debuginfoUpgrade systemd-debugsourceUpgrade systemd-testsUpgrade systemd-pamUpgrade systemd-resolved-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-udevUpgrade systemdUpgrade systemd-rpm-macrosUpgrade systemd-container-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-libs-debuginfo | Jan 13, 2023 | Nov 8, 2022 |
| Debian | — | Upgrade systemd | Jul 4, 2023 | Nov 8, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/systemd.Upgrade sys-fs/udev.Upgrade sys-apps/systemd-tmpfiles.Upgrade sys-apps/systemd-utils. | May 4, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-timesyncdUpgrade systemd-udevUpgrade systemd-nspawnUpgrade systemd-networkdUpgrade systemdUpgrade systemd-resolvedUpgrade systemd-libs | Feb 13, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-resolvedUpgrade systemd-nspawnUpgrade systemd-timesyncdUpgrade systemd-libsUpgrade systemd-containerUpgrade systemdUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-networkd | Jan 6, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-udev-compatUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-udevUpgrade systemd-develUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-libs | Feb 9, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-libsUpgrade systemd-udev-compatUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd | Jan 9, 2023 | Nov 8, 2022 |
| Oracle_linux | — | Upgrade systemd-develUpgrade systemd-oomdUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-rpm-macrosUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-container | Jan 14, 2023 | Jul 8, 2022 |
| Redhat_linux | — | Upgrade systemd-oomdUpgrade systemd-devel-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-containerUpgrade systemd-pamUpgrade systemdUpgrade systemd-container-debuginfoUpgrade systemd-debugsourceUpgrade systemd-tests-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-libs-debuginfoUpgrade systemd-testsUpgrade systemd-debuginfoNo solution existsUpgrade systemd-udevUpgrade systemd-resolved-debuginfoUpgrade systemd-rpm-macrosUpgrade systemd-journal-remoteUpgrade systemd-pam-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-standalone-tmpfiles-debuginfo | Jan 13, 2023 | Nov 8, 2022 |
| Rocky_linux | — | Upgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemd-resolved-debuginfoUpgrade systemd-develUpgrade systemd-debugsourceUpgrade systemd-libs-debuginfoUpgrade systemd-container-debuginfoUpgrade systemdUpgrade systemd-udev-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-containerUpgrade systemd-debuginfoUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-oomdUpgrade systemd-journal-remote-debuginfoUpgrade systemd-resolvedUpgrade systemd-devel-debuginfo | Mar 12, 2024 | Nov 8, 2022 |
| Suse | — | Upgrade nss-systemdUpgrade systemd-sysvinitUpgrade systemd-experimentalUpgrade systemd-docUpgrade libsystemd0-32bitUpgrade libudev1-32bitUpgrade libudev-develUpgrade systemd-portableUpgrade systemdUpgrade systemd-bash-completionUpgrade systemd-develUpgrade nss-myhostname-32bitUpgrade nss-myhostnameUpgrade systemd-coredumpUpgrade libudev1Upgrade systemd-containerUpgrade systemd-loggerUpgrade nss-mymachines-32bitUpgrade nss-resolveUpgrade systemd-networkUpgrade systemd-testsuiteUpgrade systemd-langUpgrade libsystemd0Upgrade libudev-devel-32bitUpgrade systemd-journal-remoteUpgrade udevUpgrade systemd-32bitUpgrade nss-mymachines | Nov 16, 2022 | Nov 8, 2022 |
| Ubuntu | — | Upgrade systemd (Ubuntu Pro)Upgrade systemd | Mar 22, 2023 | Nov 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub