An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-networkdUpgrade systemd-develUpgrade systemd-journal-gatewayUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-debuginfoUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemdUpgrade libgudev1Upgrade systemd-python | Apr 27, 2020 | Jan 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 11, 2019 |
| Centos_linux | — | Upgrade systemdUpgrade systemd-libsUpgrade systemd-resolvedUpgrade libgudev1Upgrade systemd-journal-gatewayUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-debuginfoUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-networkd | Jan 16, 2019 | Jan 9, 2019 |
| Debian | — | Upgrade systemd | Jan 14, 2019 | Jan 9, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 25, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemdUpgrade systemd-pythonUpgrade systemd-develUpgrade libgudev1-develUpgrade systemd-sysvUpgrade libgudev1Upgrade systemd-libs | Feb 22, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-pythonUpgrade systemd-develUpgrade systemd-libsUpgrade libgudev1Upgrade systemdUpgrade libgudev1-develUpgrade systemd-sysv | Mar 27, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemdUpgrade systemd-sysvUpgrade systemd-libsUpgrade systemd-pythonUpgrade systemd-devel | Feb 15, 2019 | Jan 11, 2019 |
| Oracle_linux | — | Upgrade systemdUpgrade systemd-libsUpgrade systemd-resolvedUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-networkdUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-develUpgrade systemd-journal-gateway | Jul 21, 2020 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade systemd-sysvUpgrade systemd-libsUpgrade systemdUpgrade libgudev1-develUpgrade systemd-debuginfoUpgrade libgudev1Upgrade systemd-develUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-pythonUpgrade systemd-journal-gateway | Jan 15, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade systemd-mini-develUpgrade systemd-32bitUpgrade typelib-1_0-GUdev-1_0Upgrade systemd-langUpgrade libudev-mini1Upgrade libudev-develUpgrade nss-myhostnameUpgrade systemd-mini-coredump-miniUpgrade libsystemd0-32bitUpgrade nss-myhostname-32bitUpgrade udev-miniUpgrade systemd-sysvinitUpgrade systemd-coredumpUpgrade libgudev-1_0-0-32bitUpgrade systemd-mini-container-miniUpgrade systemd-docUpgrade libsystemd0Upgrade systemd-loggerUpgrade systemd-journal-remoteUpgrade libgudev-1_0-develUpgrade systemdUpgrade libudev-mini-develUpgrade systemd-containerUpgrade libgudev-1_0-0Upgrade systemd-bash-completionUpgrade systemd-mini-bash-completionUpgrade libsystemd0-miniUpgrade udevUpgrade systemd-develUpgrade nss-mymachinesUpgrade systemd-miniUpgrade systemd-mini-sysvinitUpgrade nss-systemdUpgrade libudev1-32bitUpgrade libudev1Upgrade libudev-devel-32bitUpgrade nss-mymachines-32bit | Jan 10, 2019 | Jan 9, 2019 |
| Ubuntu | — | Upgrade systemd | Jan 23, 2019 | Jan 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub