A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-udevUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-testsUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-pam | Sep 9, 2022 | Aug 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-networkdUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd-develUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-journal-gateway | Oct 11, 2022 | Sep 9, 2022 |
| Centos_linux | — | Upgrade systemd-pam-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-testsUpgrade systemd-networkdUpgrade libgudev1-develUpgrade systemd-libs-debuginfoUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-sysvUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-journal-remote-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-debugsourceUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemdUpgrade libgudev1Upgrade systemd-pythonUpgrade systemd-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-udev-debuginfoUpgrade systemd-libs | Aug 26, 2022 | Aug 24, 2022 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-udev-compatUpgrade systemd-pythonUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemdUpgrade libgudev1Upgrade systemd-libsUpgrade systemd-devel | Oct 11, 2022 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-pamUpgrade systemd-udevUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-udev-compatUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-devel | Feb 9, 2023 | Sep 9, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade systemd-containerUpgrade systemd-testsUpgrade systemd-networkdUpgrade systemd-udevUpgrade systemd-pamUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-sysvUpgrade systemdUpgrade systemd-journal-gatewayUpgrade systemd-journal-remoteUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-pythonUpgrade systemd-resolved | Aug 26, 2022 | Aug 19, 2022 |
| Redhat_linux | — | Upgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemd-journal-gatewayUpgrade systemd-networkdUpgrade systemd-pamUpgrade systemd-resolvedUpgrade systemd-pam-debuginfoUpgrade systemd-debugsourceUpgrade libgudev1-develUpgrade systemdUpgrade systemd-containerUpgrade systemd-pythonUpgrade systemd-tests-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-container-debuginfoUpgrade libgudev1Upgrade systemd-libsUpgrade systemd-sysvUpgrade systemd-udevUpgrade systemd-testsUpgrade systemd-journal-remote-debuginfoUpgrade systemd-debuginfoUpgrade systemd-libs-debuginfo | Aug 26, 2022 | Aug 24, 2022 |
| Rocky_linux | — | Upgrade systemd-testsUpgrade systemd-udev-debuginfoUpgrade systemd-debuginfoUpgrade systemd-udevUpgrade systemdUpgrade systemd-libsUpgrade systemd-journal-remoteUpgrade systemd-journal-remote-debuginfoUpgrade systemd-develUpgrade systemd-pam-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-containerUpgrade systemd-tests-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-pamUpgrade systemd-debugsource | Sep 6, 2022 | Sep 1, 2022 |
| Ubuntu | — | Upgrade systemd | Aug 30, 2022 | Aug 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub