An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-resolvedUpgrade systemd-networkdUpgrade libgudev1Upgrade systemd-libsUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-journal-gatewayUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd | Apr 27, 2020 | Mar 21, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 17, 2019 |
| Centos_linux | — | Upgrade systemd-sysvUpgrade systemd-containerUpgrade systemd-testsUpgrade libgudev1-develUpgrade systemd-journal-remote-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-pamUpgrade systemdUpgrade systemd-container-debuginfoUpgrade systemd-udevUpgrade systemd-tests-debuginfoUpgrade systemd-debugsourceUpgrade systemd-networkdUpgrade systemd-libs-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-debuginfoUpgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade systemd-pam-debuginfoUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-pythonUpgrade systemd-devel | Feb 22, 2019 | Feb 19, 2019 |
| Debian | — | Upgrade systemd | Feb 20, 2019 | Feb 18, 2019 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Mar 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade systemd-sysvUpgrade systemdUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-python | Apr 2, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libgudev1Upgrade systemd-libsUpgrade systemd-pythonUpgrade systemdUpgrade libgudev1-develUpgrade systemd-develUpgrade systemd-sysv | Mar 27, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-pythonUpgrade systemd-develUpgrade systemdUpgrade systemd-libsUpgrade systemd-sysvUpgrade libgudev1Upgrade libgudev1-devel | Apr 3, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade systemd-pamUpgrade systemd-networkdUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-udevUpgrade systemdUpgrade systemd-testsUpgrade libgudev1Upgrade systemd-journal-remoteUpgrade systemd-python | Jul 21, 2020 | Feb 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 21, 2019 |
| Redhat_linux | — | Upgrade systemd-container-debuginfoUpgrade systemd-sysvUpgrade systemd-pam-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-testsUpgrade systemd-journal-remoteUpgrade systemd-debugsourceUpgrade libgudev1-develUpgrade systemd-pamUpgrade systemd-journal-gatewayUpgrade systemd-udevUpgrade systemd-libs-debuginfoUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-pythonUpgrade systemd-udev-debuginfoUpgrade systemd-libsUpgrade systemdUpgrade systemd-journal-remote-debuginfoUpgrade libgudev1 | Feb 20, 2019 | Feb 19, 2019 |
| Suse | — | Upgrade systemd-coredumpUpgrade systemd-develUpgrade libudev-mini1Upgrade libgudev-1_0-develUpgrade libudev1Upgrade libsystemd0-miniUpgrade libudev-develUpgrade libudev1-32bitUpgrade libsystemd0-32bitUpgrade systemd-loggerUpgrade nss-myhostnameUpgrade nss-systemdUpgrade systemd-sysvinitUpgrade typelib-1_0-GUdev-1_0Upgrade libgudev-1_0-0-32bitUpgrade systemd-32bitUpgrade nss-mymachines-32bitUpgrade udevUpgrade libsystemd0Upgrade systemd-journal-remoteUpgrade systemd-mini-coredump-miniUpgrade systemd-mini-sysvinitUpgrade systemd-mini-bash-completionUpgrade systemd-containerUpgrade libudev-devel-32bitUpgrade systemdUpgrade systemd-docUpgrade systemd-mini-develUpgrade libgudev-1_0-0Upgrade systemd-bash-completionUpgrade systemd-langUpgrade systemd-mini-container-miniUpgrade libudev-mini-develUpgrade nss-mymachinesUpgrade nss-myhostname-32bitUpgrade udev-miniUpgrade systemd-mini | Feb 19, 2019 | Feb 19, 2019 |
| Ubuntu | — | Upgrade systemdUpgrade libsystemd0 | Feb 27, 2019 | Feb 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub