An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-debuginfoUpgrade libgudev1Upgrade systemdUpgrade libgudev1-develUpgrade systemd-develUpgrade systemd-sysvUpgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade systemd-networkd | Apr 27, 2020 | Jan 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 11, 2019 |
| Centos_linux | — | Upgrade systemd-journal-gatewayUpgrade systemd-develUpgrade systemdUpgrade systemd-networkdUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-resolvedUpgrade systemd-sysvUpgrade systemd-libsUpgrade systemd-pythonUpgrade systemd-debuginfo | Jan 16, 2019 | Jan 10, 2019 |
| Debian | — | Upgrade systemd | Jan 14, 2019 | Jan 10, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 25, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-develUpgrade libgudev1Upgrade libgudev1-develUpgrade systemdUpgrade systemd-sysv | Feb 22, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-sysvUpgrade systemd-pythonUpgrade systemdUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-devel | Mar 27, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-develUpgrade systemd-libsUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd | Feb 15, 2019 | Jan 11, 2019 |
| Oracle_linux | — | Upgrade systemd-journal-gatewayUpgrade systemd-libsUpgrade systemd-develUpgrade libgudev1Upgrade systemd-resolvedUpgrade systemdUpgrade systemd-networkdUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-sysv | Jul 21, 2020 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade systemdUpgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-resolvedUpgrade libgudev1Upgrade systemd-networkdUpgrade systemd-sysvUpgrade systemd-pythonUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-journal-gateway | Jan 15, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade nss-myhostname-32bitUpgrade nss-mymachines-32bitUpgrade libudev-develUpgrade systemd-mini-bash-completionUpgrade systemd-mini-develUpgrade udev-miniUpgrade libgudev-1_0-0Upgrade systemd-journal-remoteUpgrade systemd-containerUpgrade systemd-bash-completionUpgrade nss-myhostnameUpgrade systemd-docUpgrade systemd-mini-coredump-miniUpgrade nss-mymachinesUpgrade systemdUpgrade systemd-32bitUpgrade systemd-langUpgrade libudev1Upgrade libudev-devel-32bitUpgrade typelib-1_0-GUdev-1_0Upgrade libsystemd0-32bitUpgrade libsystemd0-miniUpgrade libgudev-1_0-0-32bitUpgrade systemd-sysvinitUpgrade udevUpgrade libudev1-32bitUpgrade nss-systemdUpgrade systemd-mini-sysvinitUpgrade libudev-mini1Upgrade libudev-mini-develUpgrade systemd-loggerUpgrade systemd-miniUpgrade libsystemd0Upgrade systemd-mini-container-miniUpgrade systemd-coredumpUpgrade libgudev-1_0-develUpgrade systemd-devel | Jan 10, 2019 | Jan 10, 2019 |
| Ubuntu | — | Upgrade systemd | Jan 23, 2019 | Jan 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub