A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-develUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-pythonUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade libgudev1-develUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-sysv | Jun 24, 2021 | Oct 26, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 26, 2018 |
| Centos_linux | — | Upgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-develUpgrade libgudev1Upgrade systemd-sysvUpgrade systemd-debuginfoUpgrade systemdUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-journal-gatewayUpgrade systemd-networkd | Aug 28, 2019 | Oct 26, 2018 |
| Debian | — | Upgrade systemd | Feb 19, 2019 | Oct 26, 2018 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Oct 31, 2018 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemdUpgrade libgudev1Upgrade systemd-develUpgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-sysvUpgrade systemd-python | Dec 4, 2019 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-develUpgrade libgudev1-develUpgrade libgudev1Upgrade systemdUpgrade systemd-sysvUpgrade systemd-pythonUpgrade systemd-libs | Sep 25, 2019 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libgudev1-develUpgrade systemd-libsUpgrade libgudev1Upgrade systemdUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-develUpgrade systemd-udev-compat | Nov 19, 2019 | Oct 26, 2018 |
| Oracle_linux | — | Upgrade systemdUpgrade systemd-pythonUpgrade systemd-develUpgrade libgudev1Upgrade systemd-resolvedUpgrade libgudev1-develUpgrade systemd-networkdUpgrade systemd-sysvUpgrade systemd-journal-gatewayUpgrade systemd-libs | Jul 21, 2020 | Oct 26, 2018 |
| Redhat_linux | — | Upgrade systemd-sysvUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-networkdUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemdUpgrade systemd-journal-gatewayUpgrade systemd-debuginfo | Aug 7, 2019 | Oct 26, 2018 |
| Suse | — | Upgrade systemd-docUpgrade systemd-mini-develUpgrade systemd-mini-sysvinitUpgrade libgudev-1_0-0Upgrade systemd-journal-remoteUpgrade systemd-mini-coredump-miniUpgrade systemd-32bitUpgrade systemd-langUpgrade udev-miniUpgrade systemdUpgrade systemd-miniUpgrade libudev-devel-32bitUpgrade nss-myhostname-32bitUpgrade systemd-mini-container-miniUpgrade nss-mymachinesUpgrade libudev-mini-develUpgrade systemd-mini-bash-completionUpgrade libgudev-1_0-0-32bitUpgrade nss-mymachines-32bitUpgrade libudev1Upgrade libudev1-32bitUpgrade libgudev-1_0-develUpgrade libudev-develUpgrade libsystemd0Upgrade udevUpgrade systemd-bash-completionUpgrade systemd-containerUpgrade libsystemd0-32bitUpgrade systemd-loggerUpgrade systemd-sysvinitUpgrade libudev-mini1Upgrade nss-myhostnameUpgrade typelib-1_0-GUdev-1_0Upgrade libsystemd0-miniUpgrade systemd-develUpgrade nss-systemdUpgrade systemd-coredump | Nov 10, 2018 | Oct 26, 2018 |
| Ubuntu | — | Upgrade systemd | Nov 15, 2018 | Oct 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub