Name: CVE-2019-20386: Missing Release of Memory after Effective Lifetime
Creator: Rapid7
Published: 2020-01-21T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-20386, CWE-401, CVSS 2.4, EPSS 0.00152

An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.

CVSS Details

CVSS 3.1 Base Score: 2.4
CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon Linux Ami 2	—	Upgrade libgudev1Upgrade libgudev1-develUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemd-sysvUpgrade systemdUpgrade systemd-journal-gateway	Jun 24, 2021	Jan 21, 2020
Centos_linux	—	Upgrade systemd-debugsourceUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-udevUpgrade systemd-tests-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-pamUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-pam-debuginfoUpgrade systemd-testsUpgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-libs-debuginfoUpgrade systemd-networkdUpgrade systemd-udev-debuginfoUpgrade libgudev1Upgrade systemd-debuginfoUpgrade systemdUpgrade systemd-pythonUpgrade systemd-devel	Oct 1, 2020	Jan 21, 2020
Debian	—	Upgrade systemd	Jul 30, 2024	Jan 21, 2020
Nutanix Ahv	—	Upgrade Nutanix AHV to the latest version	Jun 5, 2026	Sep 19, 2022
Oracle_linux	—	Upgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-udevUpgrade systemdUpgrade systemd-sysvUpgrade systemd-testsUpgrade libgudev1Upgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-pythonUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemd-journal-gateway	Oct 7, 2020	Jan 22, 2020
Redhat Openshift	—	Upgrade redhat-coreos	Mar 15, 2021	Jan 21, 2020
Redhat_linux	—	Upgrade systemd-journal-remote-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfoUpgrade systemd-pythonUpgrade systemd-tests-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-udevUpgrade systemdUpgrade libgudev1Upgrade systemd-containerUpgrade systemd-develUpgrade libgudev1-develUpgrade systemd-debugsourceUpgrade systemd-resolvedUpgrade systemd-sysvUpgrade systemd-libsUpgrade systemd-journal-gatewayUpgrade systemd-pamUpgrade systemd-networkdUpgrade systemd-testsUpgrade systemd-pam-debuginfo	Oct 1, 2020	Jan 21, 2020
Suse	—	Upgrade nss-systemdUpgrade systemd-mini-coredump-miniUpgrade nss-mymachines-32bitUpgrade systemd-mini-bash-completionUpgrade udevUpgrade systemd-docUpgrade libudev1Upgrade systemd-langUpgrade systemdUpgrade libudev-mini-develUpgrade systemd-mini-sysvinitUpgrade nss-mymachinesUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade nss-myhostname-32bitUpgrade libsystemd0-miniUpgrade libudev-mini1Upgrade systemd-miniUpgrade libsystemd0Upgrade libsystemd0-32bitUpgrade systemd-bash-completionUpgrade systemd-32bitUpgrade nss-myhostnameUpgrade libudev1-32bitUpgrade systemd-loggerUpgrade systemd-coredumpUpgrade systemd-mini-develUpgrade systemd-mini-container-miniUpgrade systemd-containerUpgrade udev-miniUpgrade systemd-sysvinitUpgrade libudev-devel-32bitUpgrade libudev-devel	Feb 7, 2020	Jan 21, 2020
Ubuntu	—	Upgrade systemd	Feb 6, 2020	Jan 21, 2020
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Jan 21, 2020

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence