An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libgudev1amazon-linux-ami-2-upgrade-libgudev1-develamazon-linux-ami-2-upgrade-systemdamazon-linux-ami-2-upgrade-systemd-debuginfoamazon-linux-ami-2-upgrade-systemd-develamazon-linux-ami-2-upgrade-systemd-journal-gatewayamazon-linux-ami-2-upgrade-systemd-libsamazon-linux-ami-2-upgrade-systemd-networkdamazon-linux-ami-2-upgrade-systemd-pythonamazon-linux-ami-2-upgrade-systemd-resolvedamazon-linux-ami-2-upgrade-systemd-sysv | Apr 27, 2020 | Mar 21, 2019 | |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 17, 2019 |
| Centos_linux | — | centos-upgrade-libgudev1centos-upgrade-libgudev1-develcentos-upgrade-systemdcentos-upgrade-systemd-containercentos-upgrade-systemd-container-debuginfocentos-upgrade-systemd-debuginfocentos-upgrade-systemd-debugsourcecentos-upgrade-systemd-develcentos-upgrade-systemd-journal-gatewaycentos-upgrade-systemd-journal-remotecentos-upgrade-systemd-journal-remote-debuginfocentos-upgrade-systemd-libscentos-upgrade-systemd-libs-debuginfocentos-upgrade-systemd-networkdcentos-upgrade-systemd-pamcentos-upgrade-systemd-pam-debuginfocentos-upgrade-systemd-pythoncentos-upgrade-systemd-resolvedcentos-upgrade-systemd-sysvcentos-upgrade-systemd-testscentos-upgrade-systemd-tests-debuginfocentos-upgrade-systemd-udevcentos-upgrade-systemd-udev-debuginfo | Feb 22, 2019 | Feb 19, 2019 |
| Debian | debian-upgrade-systemd | Feb 20, 2019 | Feb 18, 2019 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-apps-systemd | Mar 11, 2019 | Mar 10, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libgudev1huawei-euleros-2_0_sp2-upgrade-libgudev1-develhuawei-euleros-2_0_sp2-upgrade-systemdhuawei-euleros-2_0_sp2-upgrade-systemd-develhuawei-euleros-2_0_sp2-upgrade-systemd-libshuawei-euleros-2_0_sp2-upgrade-systemd-pythonhuawei-euleros-2_0_sp2-upgrade-systemd-sysv | Apr 2, 2019 | Mar 21, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-libgudev1huawei-euleros-2_0_sp3-upgrade-libgudev1-develhuawei-euleros-2_0_sp3-upgrade-systemdhuawei-euleros-2_0_sp3-upgrade-systemd-develhuawei-euleros-2_0_sp3-upgrade-systemd-libshuawei-euleros-2_0_sp3-upgrade-systemd-pythonhuawei-euleros-2_0_sp3-upgrade-systemd-sysv | Mar 27, 2019 | Mar 21, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libgudev1huawei-euleros-2_0_sp5-upgrade-libgudev1-develhuawei-euleros-2_0_sp5-upgrade-systemdhuawei-euleros-2_0_sp5-upgrade-systemd-develhuawei-euleros-2_0_sp5-upgrade-systemd-libshuawei-euleros-2_0_sp5-upgrade-systemd-pythonhuawei-euleros-2_0_sp5-upgrade-systemd-sysv | Apr 3, 2019 | Mar 21, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-libgudev1oracle-linux-upgrade-libgudev1-develoracle-linux-upgrade-systemdoracle-linux-upgrade-systemd-containeroracle-linux-upgrade-systemd-develoracle-linux-upgrade-systemd-journal-gatewayoracle-linux-upgrade-systemd-journal-remoteoracle-linux-upgrade-systemd-libsoracle-linux-upgrade-systemd-networkdoracle-linux-upgrade-systemd-pamoracle-linux-upgrade-systemd-pythonoracle-linux-upgrade-systemd-resolvedoracle-linux-upgrade-systemd-sysvoracle-linux-upgrade-systemd-testsoracle-linux-upgrade-systemd-udev | Jul 21, 2020 | Feb 18, 2019 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Dec 29, 2020 | Mar 21, 2019 | |
| Redhat_linux | redhat-upgrade-libgudev1redhat-upgrade-libgudev1-develredhat-upgrade-systemdredhat-upgrade-systemd-containerredhat-upgrade-systemd-container-debuginforedhat-upgrade-systemd-debuginforedhat-upgrade-systemd-debugsourceredhat-upgrade-systemd-develredhat-upgrade-systemd-journal-gatewayredhat-upgrade-systemd-journal-remoteredhat-upgrade-systemd-journal-remote-debuginforedhat-upgrade-systemd-libsredhat-upgrade-systemd-libs-debuginforedhat-upgrade-systemd-networkdredhat-upgrade-systemd-pamredhat-upgrade-systemd-pam-debuginforedhat-upgrade-systemd-pythonredhat-upgrade-systemd-resolvedredhat-upgrade-systemd-sysvredhat-upgrade-systemd-testsredhat-upgrade-systemd-tests-debuginforedhat-upgrade-systemd-udevredhat-upgrade-systemd-udev-debuginfo | Feb 20, 2019 | Feb 19, 2019 | |
| Suse | — | suse-upgrade-libgudev-1_0-0suse-upgrade-libgudev-1_0-0-32bitsuse-upgrade-libgudev-1_0-develsuse-upgrade-libsystemd0suse-upgrade-libsystemd0-32bitsuse-upgrade-libsystemd0-minisuse-upgrade-libudev-develsuse-upgrade-libudev-devel-32bitsuse-upgrade-libudev-mini-develsuse-upgrade-libudev-mini1suse-upgrade-libudev1suse-upgrade-libudev1-32bitsuse-upgrade-nss-myhostnamesuse-upgrade-nss-myhostname-32bitsuse-upgrade-nss-mymachinessuse-upgrade-nss-mymachines-32bitsuse-upgrade-nss-systemdsuse-upgrade-systemdsuse-upgrade-systemd-32bitsuse-upgrade-systemd-bash-completionsuse-upgrade-systemd-containersuse-upgrade-systemd-coredumpsuse-upgrade-systemd-develsuse-upgrade-systemd-docsuse-upgrade-systemd-journal-remotesuse-upgrade-systemd-langsuse-upgrade-systemd-loggersuse-upgrade-systemd-minisuse-upgrade-systemd-mini-bash-completionsuse-upgrade-systemd-mini-container-minisuse-upgrade-systemd-mini-coredump-minisuse-upgrade-systemd-mini-develsuse-upgrade-systemd-mini-sysvinitsuse-upgrade-systemd-sysvinitsuse-upgrade-typelib-1_0-gudev-1_0suse-upgrade-udevsuse-upgrade-udev-mini | Feb 19, 2019 | Feb 19, 2019 |
| Ubuntu | ubuntu-upgrade-libsystemd0ubuntu-upgrade-systemd | Feb 27, 2019 | Feb 18, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub