An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-develUpgrade systemd-journal-gatewayUpgrade systemd-networkdUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-resolvedUpgrade systemd-pythonUpgrade libgudev1Upgrade systemdUpgrade systemd-debuginfoUpgrade systemd-libs | Apr 27, 2020 | Jan 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 11, 2019 |
| Centos_linux | — | Upgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-debuginfoUpgrade systemdUpgrade libgudev1Upgrade systemd-libsUpgrade systemd-networkdUpgrade systemd-sysvUpgrade libgudev1-devel | Jan 16, 2019 | Jan 9, 2019 |
| Debian | — | Upgrade systemd | Jan 14, 2019 | Jan 9, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 25, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-pythonUpgrade systemd-develUpgrade systemdUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-sysv | Feb 22, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libgudev1Upgrade systemd-develUpgrade systemd-pythonUpgrade systemdUpgrade systemd-libsUpgrade systemd-sysvUpgrade libgudev1-devel | Mar 27, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemdUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-sysvUpgrade systemd-python | Feb 15, 2019 | Jan 11, 2019 |
| Oracle_linux | — | Upgrade systemd-libsUpgrade systemd-networkdUpgrade libgudev1Upgrade systemd-sysvUpgrade systemd-resolvedUpgrade systemdUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-journal-gatewayUpgrade systemd-devel | Jul 21, 2020 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade systemd-journal-gatewayUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-networkdUpgrade systemdUpgrade systemd-sysvUpgrade systemd-develUpgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-resolvedUpgrade libgudev1 | Jan 15, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade libgudev-1_0-0Upgrade nss-systemdUpgrade nss-mymachinesUpgrade udevUpgrade libsystemd0-miniUpgrade libudev1-32bitUpgrade systemd-mini-sysvinitUpgrade libudev1Upgrade systemd-miniUpgrade systemd-mini-bash-completionUpgrade systemd-bash-completionUpgrade systemd-containerUpgrade nss-mymachines-32bitUpgrade libudev-devel-32bitUpgrade systemd-develUpgrade libudev-mini-develUpgrade libsystemd0-32bitUpgrade systemd-sysvinitUpgrade typelib-1_0-GUdev-1_0Upgrade systemd-loggerUpgrade systemd-langUpgrade systemd-mini-develUpgrade libgudev-1_0-0-32bitUpgrade systemd-coredumpUpgrade systemdUpgrade systemd-docUpgrade libsystemd0Upgrade libgudev-1_0-develUpgrade systemd-mini-container-miniUpgrade systemd-32bitUpgrade nss-myhostnameUpgrade systemd-mini-coredump-miniUpgrade libudev-mini1Upgrade systemd-journal-remoteUpgrade udev-miniUpgrade libudev-develUpgrade nss-myhostname-32bit | Jan 10, 2019 | Jan 9, 2019 |
| Ubuntu | — | Upgrade systemd | Jan 23, 2019 | Jan 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub