basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-pamUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-udevUpgrade systemd-testsUpgrade systemd-journal-remoteUpgrade systemd | May 4, 2022 | Jul 20, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 20, 2021 |
| Centos_linux | — | Upgrade systemdUpgrade systemd-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-journal-remote-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-udevUpgrade systemd-testsUpgrade systemd-develUpgrade systemd-debugsourceUpgrade systemd-pamUpgrade systemd-container-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-pam-debuginfo | Jul 21, 2021 | Jul 20, 2021 |
| Debian | — | Upgrade systemd | Jul 22, 2021 | Jul 20, 2021 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Jul 21, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade systemd-containerUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-pam | Sep 24, 2021 | Jul 20, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-libsUpgrade systemd-udev-compatUpgrade systemd-udevUpgrade systemdUpgrade systemd-container | Nov 12, 2021 | Jul 20, 2021 |
| Oracle_linux | — | Upgrade systemd-testsUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-pam | Jul 22, 2021 | Jul 20, 2021 |
| Redhat_linux | — | Upgrade systemd-containerUpgrade systemd-libs-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-pamUpgrade systemdUpgrade systemd-journal-remote-debuginfoUpgrade systemd-udevUpgrade systemd-udev-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemd-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-testsUpgrade systemd-debugsourceUpgrade systemd-libsUpgrade systemd-pam-debuginfo | Jul 21, 2021 | Jul 20, 2021 |
| Rocky_linux | — | Upgrade systemd-develUpgrade systemd-udev-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-debuginfoUpgrade systemd-containerUpgrade systemdUpgrade systemd-libsUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfoUpgrade systemd-testsUpgrade systemd-pamUpgrade systemd-libs-debuginfoUpgrade systemd-debugsourceUpgrade systemd-tests-debuginfoUpgrade systemd-udevUpgrade systemd-journal-remote-debuginfo | May 5, 2022 | Jul 20, 2021 |
| Suse | — | Upgrade libudev1Upgrade udevUpgrade nss-systemdUpgrade systemd-develUpgrade libudev-develUpgrade systemd-coredumpUpgrade libsystemd0Upgrade systemd-bash-completionUpgrade systemd-journal-remoteUpgrade systemd-32bitUpgrade systemd-loggerUpgrade libsystemd0-32bitUpgrade libsystemd0-miniUpgrade systemd-sysvinitUpgrade systemd-networkUpgrade libudev-mini1Upgrade nss-myhostnameUpgrade nss-myhostname-32bitUpgrade nss-mymachines-32bitUpgrade systemd-containerUpgrade systemd-mini-container-miniUpgrade systemd-langUpgrade nss-mymachinesUpgrade libudev1-32bitUpgrade libudev-mini-develUpgrade systemd-miniUpgrade libudev-devel-32bitUpgrade udev-miniUpgrade systemd-mini-bash-completionUpgrade systemdUpgrade systemd-mini-coredump-miniUpgrade systemd-mini-sysvinitUpgrade systemd-mini-develUpgrade systemd-docUpgrade nss-resolve | Jul 21, 2021 | Jul 20, 2021 |
| Ubuntu | — | Upgrade systemd (Ubuntu Pro)Upgrade systemd | Jul 21, 2021 | Jul 20, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub