An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-libsUpgrade systemd-sysvUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade libgudev1-develUpgrade libgudev1Upgrade systemdUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade systemd-journal-gatewayUpgrade systemd-devel | Apr 27, 2020 | Mar 21, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 17, 2019 |
| Centos_linux | — | Upgrade systemd-journal-gatewayUpgrade libgudev1Upgrade systemd-udev-debuginfoUpgrade systemd-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-journal-remoteUpgrade systemd-journal-remote-debuginfoUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-libs-debuginfoUpgrade systemd-networkdUpgrade systemdUpgrade systemd-testsUpgrade systemd-containerUpgrade systemd-container-debuginfoUpgrade systemd-udevUpgrade systemd-tests-debuginfoUpgrade systemd-pamUpgrade systemd-debugsource | Feb 22, 2019 | Feb 19, 2019 |
| Debian | — | Upgrade systemd | Feb 20, 2019 | Feb 18, 2019 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Mar 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-develUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-pythonUpgrade systemdUpgrade libgudev1-develUpgrade systemd-sysv | Apr 2, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-develUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-pythonUpgrade systemdUpgrade libgudev1 | Mar 27, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-sysvUpgrade libgudev1Upgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd | Apr 3, 2019 | Mar 21, 2019 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade systemd-journal-remoteUpgrade systemd-udevUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemdUpgrade libgudev1Upgrade systemd-testsUpgrade systemd-pythonUpgrade systemd-networkdUpgrade systemd-pamUpgrade systemd-journal-gatewayUpgrade systemd-containerUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-devel | Jul 21, 2020 | Feb 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 21, 2019 |
| Redhat_linux | — | Upgrade systemd-sysvUpgrade systemd-container-debuginfoUpgrade systemd-testsUpgrade systemd-debugsourceUpgrade systemd-pamUpgrade libgudev1-develUpgrade systemd-tests-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemd-pam-debuginfoUpgrade systemd-libsUpgrade systemd-networkdUpgrade systemd-pythonUpgrade systemdUpgrade systemd-udev-debuginfoUpgrade libgudev1Upgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-devel | Feb 20, 2019 | Feb 19, 2019 |
| Suse | — | Upgrade libsystemd0-miniUpgrade nss-mymachines-32bitUpgrade systemd-develUpgrade libudev1-32bitUpgrade systemd-coredumpUpgrade systemd-32bitUpgrade udevUpgrade libsystemd0Upgrade systemd-sysvinitUpgrade libgudev-1_0-0-32bitUpgrade libsystemd0-32bitUpgrade libgudev-1_0-develUpgrade nss-systemdUpgrade typelib-1_0-GUdev-1_0Upgrade libudev-mini1Upgrade libudev1Upgrade nss-myhostnameUpgrade systemd-loggerUpgrade libudev-develUpgrade systemd-mini-develUpgrade nss-mymachinesUpgrade systemd-miniUpgrade libgudev-1_0-0Upgrade systemd-mini-coredump-miniUpgrade systemd-mini-bash-completionUpgrade systemd-mini-sysvinitUpgrade systemd-langUpgrade systemd-containerUpgrade libudev-mini-develUpgrade systemdUpgrade systemd-docUpgrade systemd-journal-remoteUpgrade nss-myhostname-32bitUpgrade systemd-bash-completionUpgrade systemd-mini-container-miniUpgrade udev-miniUpgrade libudev-devel-32bit | Feb 19, 2019 | Feb 19, 2019 |
| Ubuntu | — | Upgrade systemdUpgrade libsystemd0 | Feb 27, 2019 | Feb 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub