An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemdUpgrade systemd-journal-gatewayUpgrade systemd-develUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade systemd-resolvedUpgrade systemd-libsUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-networkd | Apr 27, 2020 | Mar 21, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 17, 2019 |
| Centos_linux | — | Upgrade systemd-develUpgrade libgudev1Upgrade systemd-pam-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-pythonUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-journal-gatewayUpgrade systemd-debuginfoUpgrade systemd-debugsourceUpgrade systemd-testsUpgrade systemd-libs-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-udevUpgrade systemd-tests-debuginfoUpgrade systemdUpgrade libgudev1-develUpgrade systemd-journal-remoteUpgrade systemd-journal-remote-debuginfoUpgrade systemd-networkdUpgrade systemd-pamUpgrade systemd-sysvUpgrade systemd-container | Feb 22, 2019 | Feb 19, 2019 |
| Debian | — | Upgrade systemd | Feb 20, 2019 | Feb 18, 2019 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Mar 10, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemdUpgrade systemd-sysvUpgrade libgudev1 | Apr 2, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-develUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemdUpgrade systemd-libsUpgrade systemd-pythonUpgrade libgudev1 | Mar 27, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemdUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-sysvUpgrade systemd-libsUpgrade libgudev1-develUpgrade libgudev1 | Apr 3, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade systemdUpgrade systemd-pythonUpgrade libgudev1-develUpgrade systemd-udevUpgrade systemd-testsUpgrade systemd-sysvUpgrade systemd-journal-remoteUpgrade libgudev1Upgrade systemd-develUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-journal-gatewayUpgrade systemd-resolvedUpgrade systemd-networkd | Jul 21, 2020 | Feb 18, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 21, 2019 |
| Redhat_linux | — | Upgrade systemd-containerUpgrade systemd-debuginfoUpgrade systemd-testsUpgrade systemd-journal-remoteUpgrade systemd-pythonUpgrade systemd-journal-remote-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemdUpgrade systemd-develUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-libs-debuginfoUpgrade systemd-debugsourceUpgrade systemd-tests-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-pamUpgrade systemd-udevUpgrade libgudev1-develUpgrade systemd-container-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-sysv | Feb 20, 2019 | Feb 19, 2019 |
| Suse | — | Upgrade nss-systemdUpgrade systemd-develUpgrade libudev-develUpgrade nss-myhostnameUpgrade systemd-loggerUpgrade libsystemd0Upgrade libgudev-1_0-develUpgrade typelib-1_0-GUdev-1_0Upgrade systemd-sysvinitUpgrade libsystemd0-miniUpgrade libgudev-1_0-0-32bitUpgrade nss-mymachines-32bitUpgrade libudev1-32bitUpgrade libudev-mini1Upgrade systemd-coredumpUpgrade systemd-32bitUpgrade udevUpgrade libsystemd0-32bitUpgrade libudev1Upgrade udev-miniUpgrade systemd-langUpgrade systemd-mini-develUpgrade systemd-containerUpgrade nss-myhostname-32bitUpgrade libgudev-1_0-0Upgrade systemd-mini-sysvinitUpgrade libudev-devel-32bitUpgrade systemd-bash-completionUpgrade systemd-journal-remoteUpgrade systemd-mini-coredump-miniUpgrade nss-mymachinesUpgrade systemd-mini-bash-completionUpgrade systemd-docUpgrade systemd-mini-container-miniUpgrade systemd-miniUpgrade systemdUpgrade libudev-mini-devel | Feb 19, 2019 | Feb 19, 2019 |
| Ubuntu | — | Upgrade systemdUpgrade libsystemd0 | Feb 27, 2019 | Feb 18, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 17, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub