An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-journal-gatewayUpgrade systemd-pythonUpgrade systemd-develUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-networkdUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-resolved | Apr 27, 2020 | Mar 21, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 17, 2019 |
| Centos_linux | — | Upgrade libgudev1Upgrade systemd-pythonUpgrade systemd-develUpgrade systemd-udev-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-pam-debuginfoUpgrade systemdUpgrade systemd-debugsourceUpgrade systemd-container-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-containerUpgrade libgudev1-develUpgrade systemd-journal-remoteUpgrade systemd-networkdUpgrade systemd-pamUpgrade systemd-sysvUpgrade systemd-udevUpgrade systemd-libs-debuginfoUpgrade systemd-tests | Feb 22, 2019 | Feb 19, 2019 |
| Debian | — | Upgrade systemd | Feb 20, 2019 | Feb 18, 2019 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Mar 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemdUpgrade systemd-pythonUpgrade systemd-sysvUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-develUpgrade systemd-libs | Apr 2, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-develUpgrade systemd-sysvUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-libsUpgrade systemd-pythonUpgrade systemd | Mar 27, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemdUpgrade systemd-develUpgrade systemd-pythonUpgrade systemd-sysvUpgrade libgudev1Upgrade systemd-libsUpgrade libgudev1-devel | Apr 3, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade libgudev1Upgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-journal-remoteUpgrade systemd-sysvUpgrade systemd-udevUpgrade systemdUpgrade systemd-testsUpgrade systemd-journal-gatewayUpgrade systemd-develUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemd-pam | Jul 21, 2020 | Feb 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 21, 2019 |
| Redhat_linux | — | Upgrade systemd-develUpgrade systemdUpgrade systemd-udev-debuginfoUpgrade systemd-resolvedUpgrade libgudev1Upgrade systemd-debuginfoUpgrade systemd-networkdUpgrade systemd-pythonUpgrade systemd-containerUpgrade systemd-libs-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-tests-debuginfoUpgrade systemd-pamUpgrade systemd-udevUpgrade libgudev1-develUpgrade systemd-container-debuginfoUpgrade systemd-sysvUpgrade systemd-journal-remoteUpgrade systemd-debugsourceUpgrade systemd-pam-debuginfoUpgrade systemd-journal-gateway | Feb 20, 2019 | Feb 19, 2019 |
| Suse | — | Upgrade nss-mymachinesUpgrade systemd-mini-bash-completionUpgrade nss-myhostname-32bitUpgrade systemd-mini-coredump-miniUpgrade systemd-mini-container-miniUpgrade systemd-miniUpgrade systemd-mini-develUpgrade systemdUpgrade systemd-bash-completionUpgrade systemd-langUpgrade libudev-mini-develUpgrade libgudev-1_0-0Upgrade systemd-journal-remoteUpgrade systemd-containerUpgrade systemd-docUpgrade systemd-mini-sysvinitUpgrade udev-miniUpgrade libudev-devel-32bitUpgrade systemd-coredumpUpgrade nss-systemdUpgrade libgudev-1_0-develUpgrade systemd-sysvinitUpgrade typelib-1_0-GUdev-1_0Upgrade libsystemd0Upgrade systemd-develUpgrade libudev1Upgrade libudev-develUpgrade libudev1-32bitUpgrade libudev-mini1Upgrade libsystemd0-32bitUpgrade udevUpgrade systemd-32bitUpgrade libsystemd0-miniUpgrade systemd-loggerUpgrade libgudev-1_0-0-32bitUpgrade nss-mymachines-32bitUpgrade nss-myhostname | Feb 19, 2019 | Feb 19, 2019 |
| Ubuntu | — | Upgrade systemdUpgrade libsystemd0 | Feb 27, 2019 | Feb 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub