An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-networkdUpgrade libgudev1Upgrade systemd-sysvUpgrade systemd-libsUpgrade systemd-resolvedUpgrade libgudev1-develUpgrade systemd-develUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade systemd-journal-gateway | Apr 27, 2020 | Mar 21, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 17, 2019 |
| Centos_linux | — | Upgrade systemd-container-debuginfoUpgrade systemd-testsUpgrade systemd-libs-debuginfoUpgrade systemdUpgrade systemd-sysvUpgrade systemd-pamUpgrade systemd-networkdUpgrade systemd-containerUpgrade libgudev1-develUpgrade systemd-tests-debuginfoUpgrade systemd-udevUpgrade systemd-debugsourceUpgrade systemd-journal-remote-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-udev-debuginfoUpgrade systemd-pythonUpgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade systemd-debuginfoUpgrade libgudev1Upgrade systemd-develUpgrade systemd-libsUpgrade systemd-pam-debuginfo | Feb 22, 2019 | Feb 19, 2019 |
| Debian | — | Upgrade systemd | Feb 20, 2019 | Feb 18, 2019 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Mar 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemdUpgrade libgudev1-develUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-sysvUpgrade systemd-libsUpgrade systemd-devel | Apr 2, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-pythonUpgrade libgudev1Upgrade systemd-libsUpgrade systemdUpgrade systemd-sysvUpgrade systemd-develUpgrade libgudev1-devel | Mar 27, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemdUpgrade systemd-develUpgrade systemd-pythonUpgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-sysvUpgrade libgudev1 | Apr 3, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade systemd-networkdUpgrade systemd-develUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade systemd-sysvUpgrade systemd-udevUpgrade libgudev1-develUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-tests | Jul 21, 2020 | Feb 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 21, 2019 |
| Redhat_linux | — | Upgrade systemd-debuginfoUpgrade systemd-containerUpgrade systemd-networkdUpgrade systemd-develUpgrade systemd-pythonUpgrade systemd-libs-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-libsUpgrade systemdUpgrade systemd-udev-debuginfoUpgrade systemd-resolvedUpgrade libgudev1Upgrade systemd-container-debuginfoUpgrade systemd-debugsourceUpgrade systemd-udevUpgrade systemd-pam-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-tests-debuginfoUpgrade systemd-pamUpgrade systemd-journal-gatewayUpgrade libgudev1-develUpgrade systemd-testsUpgrade systemd-sysv | Feb 20, 2019 | Feb 19, 2019 |
| Suse | — | Upgrade systemd-bash-completionUpgrade systemd-langUpgrade systemd-docUpgrade systemd-miniUpgrade systemdUpgrade systemd-mini-develUpgrade systemd-mini-container-miniUpgrade systemd-journal-remoteUpgrade udev-miniUpgrade libudev-devel-32bitUpgrade nss-myhostname-32bitUpgrade systemd-mini-coredump-miniUpgrade libgudev-1_0-0Upgrade systemd-containerUpgrade libudev-mini-develUpgrade nss-mymachinesUpgrade systemd-mini-bash-completionUpgrade systemd-mini-sysvinitUpgrade systemd-sysvinitUpgrade libudev1-32bitUpgrade udevUpgrade systemd-32bitUpgrade libudev1Upgrade systemd-develUpgrade nss-systemdUpgrade libgudev-1_0-0-32bitUpgrade libsystemd0Upgrade nss-mymachines-32bitUpgrade typelib-1_0-GUdev-1_0Upgrade systemd-coredumpUpgrade libsystemd0-miniUpgrade libudev-develUpgrade nss-myhostnameUpgrade systemd-loggerUpgrade libgudev-1_0-develUpgrade libudev-mini1Upgrade libsystemd0-32bit | Feb 19, 2019 | Feb 19, 2019 |
| Ubuntu | — | Upgrade libsystemd0Upgrade systemd | Feb 27, 2019 | Feb 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub