An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-develUpgrade systemd-journal-gatewayUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-networkdUpgrade systemd-pythonUpgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-resolvedUpgrade libgudev1Upgrade systemd | Apr 27, 2020 | Jan 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 11, 2019 |
| Centos_linux | — | Upgrade systemdUpgrade libgudev1Upgrade systemd-pythonUpgrade systemd-journal-gatewayUpgrade systemd-resolvedUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-debuginfoUpgrade libgudev1-develUpgrade systemd-networkdUpgrade systemd-sysv | Jan 16, 2019 | Jan 9, 2019 |
| Debian | — | Upgrade systemd | Jan 14, 2019 | Jan 9, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 25, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-libsUpgrade systemd-sysvUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-pythonUpgrade systemdUpgrade systemd-devel | Feb 22, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-develUpgrade systemd-pythonUpgrade systemd | Mar 27, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemdUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-sysv | Feb 15, 2019 | Jan 11, 2019 |
| Oracle_linux | — | Upgrade systemd-develUpgrade systemd-journal-gatewayUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemdUpgrade libgudev1Upgrade systemd-pythonUpgrade systemd-libs | Jul 21, 2020 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade libgudev1-develUpgrade systemdUpgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemd-sysvUpgrade systemd-develUpgrade libgudev1Upgrade systemd-debuginfoUpgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-journal-gateway | Jan 15, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade systemd-loggerUpgrade systemd-mini-coredump-miniUpgrade systemd-32bitUpgrade libgudev-1_0-0-32bitUpgrade libgudev-1_0-develUpgrade systemdUpgrade libudev-mini1Upgrade nss-myhostnameUpgrade systemd-docUpgrade libudev-develUpgrade libsystemd0-32bitUpgrade nss-myhostname-32bitUpgrade systemd-mini-container-miniUpgrade systemd-coredumpUpgrade libsystemd0Upgrade systemd-journal-remoteUpgrade udev-miniUpgrade systemd-langUpgrade systemd-sysvinitUpgrade typelib-1_0-GUdev-1_0Upgrade systemd-mini-develUpgrade libudev1Upgrade libudev-devel-32bitUpgrade systemd-bash-completionUpgrade systemd-develUpgrade nss-systemdUpgrade libgudev-1_0-0Upgrade nss-mymachinesUpgrade libudev1-32bitUpgrade systemd-mini-sysvinitUpgrade udevUpgrade systemd-miniUpgrade libsystemd0-miniUpgrade systemd-containerUpgrade nss-mymachines-32bitUpgrade systemd-mini-bash-completionUpgrade libudev-mini-devel | Jan 10, 2019 | Jan 9, 2019 |
| Ubuntu | — | Upgrade systemd | Jan 23, 2019 | Jan 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub