An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemdUpgrade systemd-journal-gatewayUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-debuginfoUpgrade systemd-sysvUpgrade systemd-libsUpgrade systemd-networkdUpgrade libgudev1Upgrade systemd-resolvedUpgrade libgudev1-devel | Apr 27, 2020 | Mar 21, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 17, 2019 |
| Centos_linux | — | Upgrade systemd-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-udev-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-containerUpgrade systemd-sysvUpgrade systemd-testsUpgrade systemd-networkdUpgrade systemd-udevUpgrade systemd-tests-debuginfoUpgrade libgudev1-develUpgrade systemd-journal-remote-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-pamUpgrade systemd-debugsourceUpgrade systemdUpgrade systemd-libs-debuginfoUpgrade systemd-journal-remote | Feb 22, 2019 | Feb 19, 2019 |
| Debian | — | Upgrade systemd | Feb 20, 2019 | Feb 18, 2019 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Mar 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemdUpgrade systemd-pythonUpgrade systemd-sysvUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-libsUpgrade systemd-devel | Apr 2, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-libsUpgrade systemdUpgrade libgudev1Upgrade systemd-pythonUpgrade systemd-develUpgrade systemd-sysvUpgrade libgudev1-devel | Mar 27, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemdUpgrade systemd-develUpgrade systemd-pythonUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-sysvUpgrade libgudev1-devel | Apr 3, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade systemd-journal-gatewayUpgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-networkdUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade libgudev1-develUpgrade systemd-testsUpgrade systemd-sysvUpgrade systemd-pythonUpgrade systemdUpgrade libgudev1 | Jul 21, 2020 | Feb 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 21, 2019 |
| Redhat_linux | — | Upgrade systemd-containerUpgrade systemd-udev-debuginfoUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-libsUpgrade systemd-journal-remote-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemdUpgrade systemd-sysvUpgrade systemd-debugsourceUpgrade libgudev1-develUpgrade systemd-journal-gatewayUpgrade systemd-testsUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-udevUpgrade systemd-tests-debuginfoUpgrade systemd-pam | Feb 20, 2019 | Feb 19, 2019 |
| Suse | — | Upgrade libsystemd0-miniUpgrade nss-systemdUpgrade libudev-mini1Upgrade udevUpgrade nss-mymachines-32bitUpgrade systemd-coredumpUpgrade libudev1Upgrade libudev-develUpgrade systemd-sysvinitUpgrade typelib-1_0-GUdev-1_0Upgrade libsystemd0Upgrade libgudev-1_0-0-32bitUpgrade libudev1-32bitUpgrade systemd-develUpgrade systemd-32bitUpgrade libgudev-1_0-develUpgrade nss-myhostnameUpgrade libsystemd0-32bitUpgrade systemd-loggerUpgrade systemd-mini-coredump-miniUpgrade systemd-mini-bash-completionUpgrade systemd-journal-remoteUpgrade systemd-docUpgrade libgudev-1_0-0Upgrade nss-myhostname-32bitUpgrade udev-miniUpgrade systemd-miniUpgrade systemd-mini-sysvinitUpgrade systemdUpgrade systemd-mini-develUpgrade libudev-devel-32bitUpgrade systemd-langUpgrade systemd-bash-completionUpgrade libudev-mini-develUpgrade systemd-containerUpgrade systemd-mini-container-miniUpgrade nss-mymachines | Feb 19, 2019 | Feb 19, 2019 |
| Ubuntu | — | Upgrade libsystemd0Upgrade systemd | Feb 27, 2019 | Feb 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub