An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemdUpgrade libgudev1Upgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-pythonUpgrade systemd-networkdUpgrade systemd-journal-gatewayUpgrade systemd-develUpgrade libgudev1-develUpgrade systemd-sysv | Apr 27, 2020 | Jan 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 11, 2019 |
| Centos_linux | — | Upgrade systemdUpgrade libgudev1Upgrade systemd-develUpgrade systemd-pythonUpgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-libsUpgrade systemd-networkdUpgrade libgudev1-develUpgrade systemd-sysv | Jan 16, 2019 | Jan 9, 2019 |
| Debian | — | Upgrade systemd | Jan 14, 2019 | Jan 9, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 25, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-pythonUpgrade systemd-develUpgrade systemdUpgrade libgudev1-develUpgrade systemd-sysvUpgrade libgudev1Upgrade systemd-libs | Feb 22, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-pythonUpgrade systemd-libsUpgrade libgudev1Upgrade systemdUpgrade systemd-devel | Mar 27, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemdUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-sysvUpgrade systemd-python | Feb 15, 2019 | Jan 11, 2019 |
| Oracle_linux | — | Upgrade systemd-journal-gatewayUpgrade systemd-develUpgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-networkdUpgrade libgudev1-develUpgrade systemd-resolvedUpgrade systemd-sysvUpgrade systemdUpgrade libgudev1 | Jul 21, 2020 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade systemd-journal-gatewayUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-develUpgrade systemd-debuginfoUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-libsUpgrade systemdUpgrade systemd-pythonUpgrade systemd-sysv | Jan 15, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade libudev-mini-develUpgrade nss-mymachines-32bitUpgrade systemd-containerUpgrade libudev1-32bitUpgrade systemd-mini-sysvinitUpgrade libudev1Upgrade udevUpgrade systemd-mini-bash-completionUpgrade nss-mymachinesUpgrade nss-systemdUpgrade libgudev-1_0-0Upgrade systemd-bash-completionUpgrade systemd-develUpgrade libudev-devel-32bitUpgrade systemd-miniUpgrade libsystemd0-miniUpgrade systemd-loggerUpgrade systemd-coredumpUpgrade libudev-mini1Upgrade systemd-mini-container-miniUpgrade systemd-32bitUpgrade libsystemd0Upgrade libudev-develUpgrade systemd-docUpgrade typelib-1_0-GUdev-1_0Upgrade nss-myhostname-32bitUpgrade udev-miniUpgrade libgudev-1_0-0-32bitUpgrade systemdUpgrade libgudev-1_0-develUpgrade nss-myhostnameUpgrade systemd-mini-coredump-miniUpgrade systemd-sysvinitUpgrade libsystemd0-32bitUpgrade systemd-langUpgrade systemd-journal-remoteUpgrade systemd-mini-devel | Jan 10, 2019 | Jan 9, 2019 |
| Ubuntu | — | Upgrade systemd | Jan 23, 2019 | Jan 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub