A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-libsUpgrade systemd-develUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-tests | Sep 9, 2022 | Aug 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade systemd-pythonUpgrade systemd-networkdUpgrade libgudev1Upgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-develUpgrade systemd-journal-gatewayUpgrade systemd-libsUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-resolved | Oct 11, 2022 | Sep 9, 2022 |
| Centos_linux | — | Upgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-journal-gatewayUpgrade systemdUpgrade systemd-develUpgrade systemd-udev-debuginfoUpgrade systemd-udevUpgrade systemd-libs-debuginfoUpgrade systemd-debugsourceUpgrade systemd-pam-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfoUpgrade systemd-sysvUpgrade systemd-journal-remote-debuginfoUpgrade systemd-testsUpgrade systemd-pamUpgrade systemd-tests-debuginfoUpgrade systemd-networkdUpgrade systemd-containerUpgrade libgudev1-devel | Aug 26, 2022 | Aug 24, 2022 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-udev-compatUpgrade systemdUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-libsUpgrade systemd-devel | Oct 11, 2022 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-udevUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-devel | Feb 9, 2023 | Sep 9, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade systemd-journal-gatewayUpgrade systemd-journal-remoteUpgrade systemd-resolvedUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-sysvUpgrade systemdUpgrade libgudev1Upgrade systemd-pamUpgrade systemd-udevUpgrade systemd-networkdUpgrade systemd-testsUpgrade systemd-containerUpgrade libgudev1-devel | Aug 26, 2022 | Aug 19, 2022 |
| Redhat_linux | — | Upgrade systemd-tests-debuginfoUpgrade libgudev1Upgrade systemd-udevUpgrade systemd-testsUpgrade systemd-journal-remote-debuginfoUpgrade systemd-containerUpgrade systemd-sysvUpgrade systemd-container-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-libsUpgrade systemdUpgrade systemd-pythonUpgrade libgudev1-develUpgrade systemd-debugsourceUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-networkdUpgrade systemd-journal-gatewayUpgrade systemd-develUpgrade systemd-pam-debuginfoUpgrade systemd-resolved | Aug 26, 2022 | Aug 24, 2022 |
| Rocky_linux | — | Upgrade systemd-develUpgrade systemd-tests-debuginfoUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-pam-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-debugsourceUpgrade systemd-container-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-udev-debuginfoUpgrade systemd-libsUpgrade systemd-udevUpgrade systemd-testsUpgrade systemdUpgrade systemd-debuginfo | Sep 6, 2022 | Sep 1, 2022 |
| Ubuntu | — | Upgrade systemd | Aug 30, 2022 | Aug 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub