An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-libsUpgrade libgudev1Upgrade systemdUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade libgudev1-develUpgrade systemd-develUpgrade systemd-sysvUpgrade systemd-networkdUpgrade systemd-journal-gatewayUpgrade systemd-resolved | Apr 27, 2020 | Jan 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 11, 2019 |
| Centos_linux | — | Upgrade systemd-journal-gatewayUpgrade systemdUpgrade systemd-develUpgrade libgudev1Upgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-sysvUpgrade systemd-debuginfoUpgrade libgudev1-develUpgrade systemd-networkdUpgrade systemd-resolved | Jan 16, 2019 | Jan 10, 2019 |
| Debian | — | Upgrade systemd | Jan 14, 2019 | Jan 10, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 25, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-sysvUpgrade libgudev1Upgrade systemdUpgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-python | Feb 22, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade libgudev1Upgrade systemd-sysvUpgrade systemd-pythonUpgrade systemdUpgrade libgudev1-devel | Mar 27, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-develUpgrade systemdUpgrade systemd-sysvUpgrade systemd-libsUpgrade systemd-python | Feb 15, 2019 | Jan 11, 2019 |
| Oracle_linux | — | Upgrade libgudev1-develUpgrade systemdUpgrade systemd-pythonUpgrade systemd-networkdUpgrade systemd-sysvUpgrade systemd-journal-gatewayUpgrade systemd-develUpgrade libgudev1Upgrade systemd-resolvedUpgrade systemd-libs | Jul 21, 2020 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade systemd-resolvedUpgrade libgudev1-develUpgrade systemd-networkdUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-sysvUpgrade systemd-libsUpgrade systemdUpgrade libgudev1Upgrade systemd-journal-gateway | Jan 15, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade nss-mymachines-32bitUpgrade systemd-containerUpgrade systemd-journal-remoteUpgrade libgudev-1_0-0Upgrade systemd-mini-bash-completionUpgrade nss-mymachinesUpgrade systemd-mini-develUpgrade nss-myhostnameUpgrade libudev-develUpgrade systemdUpgrade nss-myhostname-32bitUpgrade systemd-docUpgrade libudev1Upgrade udev-miniUpgrade systemd-langUpgrade systemd-mini-coredump-miniUpgrade libudev-devel-32bitUpgrade systemd-bash-completionUpgrade systemd-32bitUpgrade libsystemd0Upgrade libudev1-32bitUpgrade typelib-1_0-GUdev-1_0Upgrade udevUpgrade nss-systemdUpgrade systemd-mini-container-miniUpgrade libudev-mini1Upgrade systemd-coredumpUpgrade systemd-loggerUpgrade systemd-sysvinitUpgrade libsystemd0-miniUpgrade libgudev-1_0-0-32bitUpgrade systemd-miniUpgrade systemd-mini-sysvinitUpgrade libudev-mini-develUpgrade libgudev-1_0-develUpgrade systemd-develUpgrade libsystemd0-32bit | Jan 10, 2019 | Jan 10, 2019 |
| Ubuntu | — | Upgrade systemd | Jan 23, 2019 | Jan 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub