A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-develUpgrade systemd-journal-gatewayUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-resolvedUpgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-networkdUpgrade systemd-pythonUpgrade libgudev1 | Jun 24, 2021 | Oct 26, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 26, 2018 |
| Centos_linux | — | Upgrade systemd-networkdUpgrade systemd-sysvUpgrade systemd-pythonUpgrade systemd-journal-gatewayUpgrade libgudev1Upgrade systemdUpgrade systemd-debuginfoUpgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-resolved | Aug 28, 2019 | Oct 26, 2018 |
| Debian | — | Upgrade systemd | Feb 19, 2019 | Oct 26, 2018 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Oct 31, 2018 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libgudev1-develUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-pythonUpgrade systemdUpgrade systemd-sysvUpgrade libgudev1 | Dec 4, 2019 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-develUpgrade systemdUpgrade systemd-sysvUpgrade systemd-libsUpgrade systemd-pythonUpgrade libgudev1Upgrade libgudev1-devel | Sep 25, 2019 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libgudev1Upgrade libgudev1-develUpgrade systemd-libsUpgrade systemdUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-develUpgrade systemd-udev-compat | Nov 19, 2019 | Oct 26, 2018 |
| Oracle_linux | — | Upgrade systemdUpgrade libgudev1Upgrade systemd-pythonUpgrade systemd-develUpgrade systemd-sysvUpgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade systemd-networkdUpgrade systemd-libsUpgrade libgudev1-devel | Jul 21, 2020 | Oct 26, 2018 |
| Redhat_linux | — | Upgrade libgudev1-develUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-networkdUpgrade systemd-sysvUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-journal-gatewayUpgrade systemdUpgrade systemd-resolvedUpgrade systemd-libs | Aug 7, 2019 | Oct 26, 2018 |
| Suse | — | Upgrade systemd-32bitUpgrade systemd-langUpgrade systemd-mini-sysvinitUpgrade systemd-mini-coredump-miniUpgrade systemd-mini-develUpgrade systemd-docUpgrade libudev-devel-32bitUpgrade systemd-mini-bash-completionUpgrade nss-myhostname-32bitUpgrade systemd-mini-container-miniUpgrade libudev-mini-develUpgrade nss-mymachinesUpgrade systemd-miniUpgrade systemd-journal-remoteUpgrade systemdUpgrade libgudev-1_0-0Upgrade udev-miniUpgrade nss-mymachines-32bitUpgrade nss-myhostnameUpgrade systemd-loggerUpgrade libudev-develUpgrade libudev1Upgrade libgudev-1_0-develUpgrade libudev1-32bitUpgrade udevUpgrade libudev-mini1Upgrade systemd-sysvinitUpgrade systemd-bash-completionUpgrade systemd-containerUpgrade libsystemd0Upgrade systemd-develUpgrade libgudev-1_0-0-32bitUpgrade typelib-1_0-GUdev-1_0Upgrade libsystemd0-32bitUpgrade libsystemd0-miniUpgrade nss-systemdUpgrade systemd-coredump | Nov 10, 2018 | Oct 26, 2018 |
| Ubuntu | — | Upgrade systemd | Nov 15, 2018 | Oct 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub