An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
- CVSS 3.0 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-develUpgrade systemd-journal-gatewayUpgrade systemd-pythonUpgrade systemdUpgrade libgudev1Upgrade systemd-resolvedUpgrade systemd-networkdUpgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-debuginfoUpgrade systemd-sysv | Apr 27, 2020 | Jan 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 11, 2019 |
| Centos_linux | — | Upgrade systemd-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemdUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-networkd | Aug 28, 2019 | Jan 11, 2019 |
| Debian | — | Upgrade systemd | Jan 14, 2019 | Jan 11, 2019 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libgudev1-develUpgrade systemdUpgrade systemd-sysvUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-develUpgrade systemd-libs | Jul 23, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-pythonUpgrade systemdUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-devel | Sep 25, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade libgudev1Upgrade systemd-udev-compatUpgrade libgudev1-develUpgrade systemdUpgrade systemd-sysvUpgrade systemd-python | Nov 19, 2019 | Jan 11, 2019 |
| Oracle_linux | — | Upgrade libgudev1Upgrade systemd-libsUpgrade systemd-develUpgrade systemdUpgrade systemd-journal-gatewayUpgrade systemd-resolvedUpgrade systemd-pythonUpgrade systemd-networkdUpgrade libgudev1-develUpgrade systemd-sysv | Jul 21, 2020 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-sysvUpgrade systemd-networkdUpgrade libgudev1-develUpgrade systemd | Aug 7, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade libudev-mini-develUpgrade libudev1-32bitUpgrade nss-myhostnameUpgrade systemd-mini-sysvinitUpgrade libsystemd0-32bitUpgrade systemd-coredumpUpgrade libsystemd0Upgrade libudev-develUpgrade systemd-bash-completionUpgrade systemd-mini-container-miniUpgrade nss-systemdUpgrade systemd-containerUpgrade libsystemd0-miniUpgrade systemd-miniUpgrade systemd-develUpgrade systemd-loggerUpgrade udevUpgrade systemd-mini-coredump-miniUpgrade libudev-devel-32bitUpgrade libudev-mini1Upgrade systemd-32bitUpgrade systemdUpgrade systemd-mini-bash-completionUpgrade nss-myhostname-32bitUpgrade nss-mymachinesUpgrade nss-mymachines-32bitUpgrade systemd-mini-develUpgrade systemd-sysvinitUpgrade udev-miniUpgrade libudev1 | Jan 22, 2019 | Jan 11, 2019 |
| Ubuntu | — | Upgrade systemd | Jan 23, 2019 | Jan 11, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub