An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-containerUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-oomdUpgrade systemd-udevUpgrade systemd-rpm-macrosUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-tests | Jan 17, 2023 | Nov 8, 2022 |
| Amazon Linux Ami 2 | — | Upgrade libgudev1-develUpgrade systemdUpgrade systemd-sysvUpgrade systemd-journal-gatewayUpgrade systemd-networkdUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-resolvedUpgrade libgudev1 | Dec 7, 2022 | Nov 8, 2022 |
| Centos_linux | — | Upgrade systemd-oomd-debuginfoUpgrade systemd-debuginfoUpgrade systemd-resolvedUpgrade systemd-oomdUpgrade systemd-devel-debuginfoUpgrade systemd-libsUpgrade systemd-pam-debuginfoUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-develUpgrade systemd-containerUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-debugsourceUpgrade systemdUpgrade systemd-libs-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfoUpgrade systemd-testsUpgrade systemd-pamUpgrade systemd-rpm-macrosUpgrade systemd-udevUpgrade systemd-resolved-debuginfoUpgrade systemd-tests-debuginfo | Jan 13, 2023 | Nov 8, 2022 |
| Debian | — | Upgrade systemd | Jul 4, 2023 | Nov 8, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/systemd.Upgrade sys-fs/udev.Upgrade sys-apps/systemd-tmpfiles.Upgrade sys-apps/systemd-utils. | May 4, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-timesyncdUpgrade systemd-nspawnUpgrade systemd-libsUpgrade systemdUpgrade systemd-udevUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemd-container | Feb 13, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-timesyncdUpgrade systemd-libsUpgrade systemdUpgrade systemd-resolvedUpgrade systemd-nspawnUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-networkd | Jan 6, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-pamUpgrade systemd-develUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-udev-compatUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-udev | Feb 9, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-udev-compatUpgrade systemd-libsUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd | Jan 9, 2023 | Nov 8, 2022 |
| Oracle_linux | — | Upgrade systemd-oomdUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-rpm-macrosUpgrade systemd-containerUpgrade systemd-testsUpgrade systemd-udevUpgrade systemdUpgrade systemd-journal-remote | Jan 14, 2023 | Jul 8, 2022 |
| Redhat_linux | — | Upgrade systemd-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-testsUpgrade systemd-udevNo solution existsUpgrade systemd-resolved-debuginfoUpgrade systemd-rpm-macrosUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-pamUpgrade systemd-oomdUpgrade systemd-libsUpgrade systemd-libs-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemdUpgrade systemd-devel-debuginfoUpgrade systemd-debugsourceUpgrade systemd-container | Jan 13, 2023 | Nov 8, 2022 |
| Rocky_linux | — | Upgrade systemd-container-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-resolved-debuginfoUpgrade systemd-udevUpgrade systemd-debugsourceUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemdUpgrade systemd-oomd-debuginfoUpgrade systemd-containerUpgrade systemd-journal-remote-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-udev-debuginfoUpgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-oomdUpgrade systemd-devel-debuginfo | Mar 12, 2024 | Nov 8, 2022 |
| Suse | — | Upgrade libudev1-32bitUpgrade libsystemd0-32bitUpgrade systemd-docUpgrade systemd-experimentalUpgrade libudev-develUpgrade systemd-sysvinitUpgrade nss-systemdUpgrade systemd-portableUpgrade systemd-containerUpgrade systemd-networkUpgrade libudev-devel-32bitUpgrade libsystemd0Upgrade systemd-journal-remoteUpgrade systemd-loggerUpgrade udevUpgrade systemdUpgrade systemd-coredumpUpgrade systemd-bash-completionUpgrade nss-myhostname-32bitUpgrade nss-myhostnameUpgrade systemd-develUpgrade nss-resolveUpgrade nss-mymachines-32bitUpgrade systemd-langUpgrade nss-mymachinesUpgrade systemd-testsuiteUpgrade systemd-32bitUpgrade libudev1 | Nov 16, 2022 | Nov 8, 2022 |
| Ubuntu | — | Upgrade systemdUpgrade systemd (Ubuntu Pro) | Mar 22, 2023 | Nov 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub