An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-debuginfoUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-libsUpgrade systemdUpgrade systemd-develUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-networkdUpgrade systemd-journal-gatewayUpgrade systemd-resolved | Apr 27, 2020 | Jan 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 11, 2019 |
| Centos_linux | — | Upgrade libgudev1-develUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-networkdUpgrade systemd-develUpgrade systemdUpgrade systemd-journal-gateway | Jan 16, 2019 | Jan 10, 2019 |
| Debian | — | Upgrade systemd | Jan 14, 2019 | Jan 10, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 25, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libgudev1Upgrade libgudev1-develUpgrade systemd-sysvUpgrade systemdUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-python | Feb 22, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemdUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-sysvUpgrade libgudev1Upgrade systemd-develUpgrade systemd-libs | Mar 27, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-develUpgrade systemd-sysvUpgrade systemdUpgrade systemd-libsUpgrade systemd-python | Feb 15, 2019 | Jan 11, 2019 |
| Oracle_linux | — | Upgrade systemd-sysvUpgrade libgudev1-develUpgrade systemdUpgrade systemd-networkdUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-journal-gatewayUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-libs | Jul 21, 2020 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade libgudev1Upgrade systemd-sysvUpgrade systemd-resolvedUpgrade systemdUpgrade systemd-networkdUpgrade systemd-develUpgrade libgudev1-develUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-journal-gateway | Jan 15, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade systemd-containerUpgrade systemd-32bitUpgrade systemd-mini-bash-completionUpgrade systemd-langUpgrade systemd-journal-remoteUpgrade systemd-bash-completionUpgrade udev-miniUpgrade libudev-devel-32bitUpgrade nss-myhostnameUpgrade nss-myhostname-32bitUpgrade nss-mymachines-32bitUpgrade nss-mymachinesUpgrade libudev-develUpgrade libudev1Upgrade systemdUpgrade systemd-mini-develUpgrade libgudev-1_0-0Upgrade systemd-docUpgrade systemd-mini-coredump-miniUpgrade udevUpgrade nss-systemdUpgrade systemd-miniUpgrade libsystemd0Upgrade systemd-mini-container-miniUpgrade libudev-mini1Upgrade systemd-coredumpUpgrade libudev1-32bitUpgrade libsystemd0-32bitUpgrade systemd-mini-sysvinitUpgrade systemd-loggerUpgrade typelib-1_0-GUdev-1_0Upgrade systemd-develUpgrade libudev-mini-develUpgrade libgudev-1_0-develUpgrade libgudev-1_0-0-32bitUpgrade systemd-sysvinitUpgrade libsystemd0-mini | Jan 10, 2019 | Jan 10, 2019 |
| Ubuntu | — | Upgrade systemd | Jan 23, 2019 | Jan 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub