A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-networkdUpgrade systemd-pythonUpgrade systemdUpgrade systemd-sysvUpgrade libgudev1Upgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade systemd-debuginfoUpgrade systemd-devel | Apr 27, 2020 | Mar 31, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 31, 2020 |
| Centos_linux | — | Upgrade systemd-tests-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-udevUpgrade systemd-journal-remote-debuginfoUpgrade systemd-testsUpgrade systemd-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-develUpgrade systemd-debugsourceUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-udev-debuginfo | Feb 25, 2020 | Feb 24, 2020 |
| Debian | — | Upgrade systemd | Jul 4, 2022 | Mar 31, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 16, 2020 | Mar 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade systemdUpgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-container | Mar 24, 2020 | Mar 23, 2020 |
| Oracle_linux | — | Upgrade systemd-containerUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-pamUpgrade systemd-udevUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-devel | Oct 5, 2022 | Feb 5, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 31, 2020 |
| Redhat_linux | — | Upgrade systemd-tests-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-pamUpgrade systemd-debugsourceUpgrade systemd-libs-debuginfoUpgrade systemd-testsUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-pam-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-udev-debuginfoUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-container-debuginfo | Feb 25, 2020 | Feb 24, 2020 |
| Suse | — | Upgrade nss-mymachines-32bitUpgrade nss-systemdUpgrade systemd-journal-remoteUpgrade libudev-devel-32bitUpgrade systemd-loggerUpgrade libudev1Upgrade systemd-mini-bash-completionUpgrade nss-mymachinesUpgrade systemd-develUpgrade libsystemd0-miniUpgrade udevUpgrade nss-myhostname-32bitUpgrade systemd-mini-sysvinitUpgrade libudev-develUpgrade libsystemd0-32bitUpgrade systemd-mini-container-miniUpgrade systemd-bash-completionUpgrade libudev-mini1Upgrade systemd-sysvinitUpgrade systemd-containerUpgrade systemd-coredumpUpgrade libudev-mini-develUpgrade systemd-docUpgrade libudev1-32bitUpgrade systemd-langUpgrade nss-myhostnameUpgrade systemd-miniUpgrade udev-miniUpgrade systemd-mini-develUpgrade systemd-32bitUpgrade libsystemd0Upgrade systemdUpgrade systemd-mini-coredump-mini | Feb 6, 2020 | Feb 5, 2020 |
| Ubuntu | — | Upgrade systemd | Feb 6, 2020 | Feb 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub