An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-networkdUpgrade systemd-develUpgrade systemd-journal-gatewayUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-debuginfoUpgrade systemd-resolvedUpgrade systemdUpgrade libgudev1 | Apr 27, 2020 | Jan 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 11, 2019 |
| Centos_linux | — | Upgrade systemd-networkdUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-journal-gatewayUpgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd | Jan 16, 2019 | Jan 9, 2019 |
| Debian | — | Upgrade systemd | Jan 14, 2019 | Jan 9, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 25, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libgudev1Upgrade systemd-sysvUpgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemdUpgrade systemd-devel | Feb 22, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-libsUpgrade systemd-develUpgrade libgudev1Upgrade systemdUpgrade systemd-python | Mar 27, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemdUpgrade systemd-develUpgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-sysv | Feb 15, 2019 | Jan 11, 2019 |
| Oracle_linux | — | Upgrade systemd-journal-gatewayUpgrade systemd-develUpgrade systemd-libsUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-sysvUpgrade systemd-networkdUpgrade systemd-pythonUpgrade systemdUpgrade systemd-resolved | Jul 21, 2020 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade systemd-journal-gatewayUpgrade systemd-develUpgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-resolvedUpgrade systemd-pythonUpgrade systemdUpgrade systemd-debuginfoUpgrade libgudev1Upgrade systemd-networkd | Jan 15, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade systemd-mini-develUpgrade systemd-32bitUpgrade libgudev-1_0-develUpgrade systemd-mini-container-miniUpgrade systemd-coredumpUpgrade nss-myhostname-32bitUpgrade typelib-1_0-GUdev-1_0Upgrade udev-miniUpgrade libsystemd0Upgrade systemd-loggerUpgrade systemdUpgrade systemd-sysvinitUpgrade systemd-langUpgrade systemd-journal-remoteUpgrade libudev-develUpgrade libsystemd0-32bitUpgrade systemd-docUpgrade libgudev-1_0-0-32bitUpgrade systemd-mini-coredump-miniUpgrade nss-myhostnameUpgrade libudev-mini1Upgrade libudev1Upgrade libudev1-32bitUpgrade systemd-mini-bash-completionUpgrade systemd-bash-completionUpgrade nss-systemdUpgrade libgudev-1_0-0Upgrade udevUpgrade nss-mymachines-32bitUpgrade libsystemd0-miniUpgrade systemd-miniUpgrade libudev-mini-develUpgrade systemd-develUpgrade systemd-containerUpgrade libudev-devel-32bitUpgrade nss-mymachinesUpgrade systemd-mini-sysvinit | Jan 10, 2019 | Jan 9, 2019 |
| Ubuntu | — | Upgrade systemd | Jan 23, 2019 | Jan 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub