A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libgudev1-develUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemdUpgrade libgudev1Upgrade systemd-networkdUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-journal-gateway | Apr 27, 2020 | Mar 31, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 31, 2020 |
| Centos_linux | — | Upgrade systemd-containerUpgrade systemd-pam-debuginfoUpgrade systemd-pamUpgrade systemd-udev-debuginfoUpgrade systemd-debugsourceUpgrade systemd-libsUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-container-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-tests-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemdUpgrade systemd-udevUpgrade systemd-testsUpgrade systemd-journal-remote-debuginfo | Feb 25, 2020 | Feb 24, 2020 |
| Debian | — | Upgrade systemd | Jul 4, 2022 | Mar 31, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 16, 2020 | Mar 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-develUpgrade systemd-libsUpgrade systemd-containerUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-udev | Mar 24, 2020 | Mar 23, 2020 |
| Oracle_linux | — | Upgrade systemd-testsUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-udevUpgrade systemdUpgrade systemd-pamUpgrade systemd-develUpgrade systemd-journal-remote | Oct 5, 2022 | Feb 5, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 31, 2020 |
| Redhat_linux | — | Upgrade systemd-container-debuginfoUpgrade systemd-libsUpgrade systemd-udev-debuginfoUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemd-libs-debuginfoUpgrade systemd-containerUpgrade systemd-testsUpgrade systemd-journal-remote-debuginfoUpgrade systemd-udevUpgrade systemd-pam-debuginfoUpgrade systemd-debugsourceUpgrade systemd-tests-debuginfoUpgrade systemd-pam | Feb 25, 2020 | Feb 24, 2020 |
| Suse | — | Upgrade libudev1-32bitUpgrade nss-myhostnameUpgrade libudev-mini-develUpgrade systemd-langUpgrade libudev-develUpgrade udev-miniUpgrade systemd-mini-coredump-miniUpgrade systemdUpgrade systemd-bash-completionUpgrade systemd-32bitUpgrade systemd-docUpgrade systemd-mini-container-miniUpgrade libudev-mini1Upgrade systemd-containerUpgrade systemd-miniUpgrade systemd-sysvinitUpgrade libsystemd0-32bitUpgrade systemd-coredumpUpgrade systemd-mini-develUpgrade libsystemd0Upgrade libudev-devel-32bitUpgrade systemd-journal-remoteUpgrade libsystemd0-miniUpgrade udevUpgrade systemd-mini-sysvinitUpgrade systemd-mini-bash-completionUpgrade libudev1Upgrade nss-mymachines-32bitUpgrade nss-myhostname-32bitUpgrade systemd-loggerUpgrade nss-mymachinesUpgrade systemd-develUpgrade nss-systemd | Feb 6, 2020 | Feb 5, 2020 |
| Ubuntu | — | Upgrade systemd | Feb 6, 2020 | Feb 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub