A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-develUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd | Sep 9, 2022 | Aug 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade libgudev1Upgrade systemd-pythonUpgrade systemd-networkdUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemdUpgrade systemd-journal-gateway | Oct 11, 2022 | Sep 9, 2022 |
| Centos_linux | — | Upgrade systemd-develUpgrade libgudev1Upgrade systemd-journal-gatewayUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-resolvedUpgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-udev-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-libs-debuginfoUpgrade systemd-debugsourceUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-testsUpgrade systemd-containerUpgrade systemd-journal-remote-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-networkdUpgrade systemd-pamUpgrade systemd-udev | Aug 26, 2022 | Aug 24, 2022 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemdUpgrade libgudev1-develUpgrade systemd-udev-compatUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-devel | Oct 11, 2022 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemdUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-udev-compatUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-container | Feb 9, 2023 | Sep 9, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade systemd-sysvUpgrade systemdUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-containerUpgrade systemd-testsUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-networkdUpgrade systemd-journal-remoteUpgrade systemd-pythonUpgrade systemd-journal-gatewayUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-libs | Aug 26, 2022 | Aug 19, 2022 |
| Redhat_linux | — | Upgrade systemd-journal-remote-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-debuginfoUpgrade systemdUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-containerUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-sysvUpgrade systemd-udevUpgrade systemd-debugsourceUpgrade systemd-resolvedUpgrade libgudev1-develUpgrade systemd-pam-debuginfoUpgrade systemd-networkdUpgrade systemd-pamUpgrade systemd-develUpgrade systemd-journal-gatewayUpgrade systemd-journal-remote | Aug 26, 2022 | Aug 24, 2022 |
| Rocky_linux | — | Upgrade systemd-udev-debuginfoUpgrade systemd-libsUpgrade systemdUpgrade systemd-udevUpgrade systemd-testsUpgrade systemd-debuginfoUpgrade systemd-pamUpgrade systemd-debugsourceUpgrade systemd-container-debuginfoUpgrade systemd-containerUpgrade systemd-tests-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-pam-debuginfoUpgrade systemd-develUpgrade systemd-journal-remote-debuginfoUpgrade systemd-libs-debuginfo | Sep 6, 2022 | Sep 1, 2022 |
| Ubuntu | — | Upgrade systemd | Aug 30, 2022 | Aug 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub