A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemdUpgrade systemd-develUpgrade systemd-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-networkdUpgrade systemd-libsUpgrade systemd-pythonUpgrade systemd-resolvedUpgrade systemd-sysvUpgrade libgudev1-develUpgrade libgudev1 | Jun 24, 2021 | Oct 26, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 26, 2018 |
| Centos_linux | — | Upgrade systemd-networkdUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-journal-gatewayUpgrade libgudev1-develUpgrade systemd-debuginfoUpgrade libgudev1Upgrade systemdUpgrade systemd-resolvedUpgrade systemd-develUpgrade systemd-libs | Aug 28, 2019 | Oct 26, 2018 |
| Debian | — | Upgrade systemd | Feb 19, 2019 | Oct 26, 2018 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Oct 31, 2018 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libgudev1Upgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-sysvUpgrade systemd-develUpgrade libgudev1-develUpgrade systemd | Dec 4, 2019 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-develUpgrade libgudev1-develUpgrade libgudev1Upgrade systemdUpgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-sysv | Sep 25, 2019 | Oct 26, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-udev-compatUpgrade systemd-develUpgrade libgudev1Upgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-pythonUpgrade systemd | Nov 19, 2019 | Oct 26, 2018 |
| Oracle_linux | — | Upgrade systemd-develUpgrade libgudev1Upgrade systemd-pythonUpgrade systemdUpgrade systemd-networkdUpgrade systemd-sysvUpgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade libgudev1-develUpgrade systemd-libs | Jul 21, 2020 | Oct 26, 2018 |
| Redhat_linux | — | Upgrade libgudev1Upgrade systemd-networkdUpgrade systemd-pythonUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade systemd-libsUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-devel | Aug 7, 2019 | Oct 26, 2018 |
| Suse | — | Upgrade libudev-mini-develUpgrade systemd-mini-develUpgrade libudev-devel-32bitUpgrade systemd-32bitUpgrade systemd-mini-coredump-miniUpgrade libgudev-1_0-0Upgrade systemd-mini-container-miniUpgrade systemd-mini-bash-completionUpgrade udev-miniUpgrade systemdUpgrade systemd-docUpgrade systemd-miniUpgrade nss-mymachinesUpgrade systemd-mini-sysvinitUpgrade systemd-journal-remoteUpgrade nss-myhostname-32bitUpgrade systemd-langUpgrade systemd-containerUpgrade typelib-1_0-GUdev-1_0Upgrade libsystemd0-miniUpgrade nss-mymachines-32bitUpgrade systemd-bash-completionUpgrade systemd-coredumpUpgrade libudev-mini1Upgrade systemd-sysvinitUpgrade libudev-develUpgrade systemd-loggerUpgrade libudev1-32bitUpgrade libsystemd0-32bitUpgrade libudev1Upgrade systemd-develUpgrade libgudev-1_0-develUpgrade nss-systemdUpgrade udevUpgrade nss-myhostnameUpgrade libgudev-1_0-0-32bitUpgrade libsystemd0 | Nov 10, 2018 | Oct 26, 2018 |
| Ubuntu | — | Upgrade systemd | Nov 15, 2018 | Oct 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub