In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 4, 2019 |
| Centos_linux | — | Upgrade systemd-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-libsUpgrade systemd-udev-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-develUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-journal-remote-debuginfoUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-debugsourceUpgrade systemd-udevUpgrade systemd-container-debuginfoUpgrade systemd-tests | Nov 6, 2019 | Sep 4, 2019 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Sep 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemdUpgrade systemd-udev-compatUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-pam | Nov 19, 2019 | Sep 4, 2019 |
| Oracle_linux | — | Upgrade systemd-develUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd | Oct 5, 2022 | Sep 3, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 4, 2019 |
| Redhat_linux | — | Upgrade systemd-udevUpgrade systemd-testsUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemdUpgrade systemd-develUpgrade systemd-container-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-pamUpgrade systemd-tests-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-debugsource | Nov 6, 2019 | Sep 4, 2019 |
| Ubuntu | — | Upgrade systemd | Sep 4, 2019 | Sep 3, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub