A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-journal-gatewayUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-networkdUpgrade systemdUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-pythonUpgrade systemd-sysv | Apr 27, 2020 | Mar 31, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 31, 2020 |
| Centos_linux | — | Upgrade systemd-pam-debuginfoUpgrade systemd-debugsourceUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-develUpgrade systemd-tests-debuginfoUpgrade systemd-udevUpgrade systemd-container-debuginfoUpgrade systemdUpgrade systemd-libs-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-journal-remote-debuginfoUpgrade systemd-tests | Feb 25, 2020 | Feb 24, 2020 |
| Debian | — | Upgrade systemd | Jul 4, 2022 | Mar 31, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 16, 2020 | Mar 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd | Mar 24, 2020 | Mar 23, 2020 |
| Oracle_linux | — | Upgrade systemd-develUpgrade systemd-udevUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-tests | Oct 5, 2022 | Feb 5, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 31, 2020 |
| Redhat_linux | — | Upgrade systemd-container-debuginfoUpgrade systemdUpgrade systemd-libsUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-udev-debuginfoUpgrade systemd-debugsourceUpgrade systemd-pam-debuginfoUpgrade systemd-pamUpgrade systemd-libs-debuginfoUpgrade systemd-testsUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-journal-remote-debuginfoUpgrade systemd-tests-debuginfo | Feb 25, 2020 | Feb 24, 2020 |
| Suse | — | Upgrade libsystemd0-miniUpgrade systemd-mini-sysvinitUpgrade systemd-develUpgrade nss-systemdUpgrade systemd-loggerUpgrade systemd-mini-bash-completionUpgrade libudev1Upgrade udevUpgrade nss-mymachinesUpgrade nss-myhostname-32bitUpgrade libudev-devel-32bitUpgrade nss-mymachines-32bitUpgrade systemd-journal-remoteUpgrade libudev-mini1Upgrade systemd-containerUpgrade libsystemd0-32bitUpgrade systemd-mini-container-miniUpgrade nss-myhostnameUpgrade libsystemd0Upgrade systemd-docUpgrade libudev-mini-develUpgrade systemd-bash-completionUpgrade systemd-32bitUpgrade systemd-mini-coredump-miniUpgrade udev-miniUpgrade systemd-mini-develUpgrade systemd-coredumpUpgrade systemd-sysvinitUpgrade systemd-miniUpgrade systemd-langUpgrade systemdUpgrade libudev1-32bitUpgrade libudev-devel | Feb 6, 2020 | Feb 5, 2020 |
| Ubuntu | — | Upgrade systemd | Feb 6, 2020 | Feb 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub