An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-oomdUpgrade systemd-pamUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-rpm-macrosUpgrade systemd-testsUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-udev | Jan 17, 2023 | Nov 8, 2022 |
| Amazon Linux Ami 2 | — | Upgrade systemd-journal-gatewayUpgrade systemdUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-networkdUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-debuginfoUpgrade systemd-resolvedUpgrade systemd-devel | Dec 7, 2022 | Nov 8, 2022 |
| Centos_linux | — | Upgrade systemdUpgrade systemd-tests-debuginfoUpgrade systemd-rpm-macrosUpgrade systemd-libs-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-testsUpgrade systemd-pamUpgrade systemd-resolved-debuginfoUpgrade systemd-udevUpgrade systemd-debugsourceUpgrade systemd-journal-remoteUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-develUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-containerUpgrade systemd-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-resolvedUpgrade systemd-devel-debuginfoUpgrade systemd-libsUpgrade systemd-udev-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-oomdUpgrade systemd-pam-debuginfo | Jan 13, 2023 | Nov 8, 2022 |
| Debian | — | Upgrade systemd | Jul 4, 2023 | Nov 8, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/systemd.Upgrade sys-fs/udev.Upgrade sys-apps/systemd-tmpfiles.Upgrade sys-apps/systemd-utils. | May 4, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemdUpgrade systemd-libsUpgrade systemd-timesyncdUpgrade systemd-udevUpgrade systemd-nspawnUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-udev-compat | Feb 13, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemdUpgrade systemd-timesyncdUpgrade systemd-nspawnUpgrade systemd-containerUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-networkd | Jan 6, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-pamUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-containerUpgrade systemdUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-journal-remote | Feb 9, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-udev-compatUpgrade systemd-libsUpgrade systemdUpgrade systemd-udevUpgrade systemd-container | Jan 9, 2023 | Nov 8, 2022 |
| Oracle_linux | — | Upgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-rpm-macrosUpgrade systemd-containerUpgrade systemd-oomdUpgrade systemd-resolvedUpgrade systemd-develUpgrade systemd-pamUpgrade systemd-libs | Jan 14, 2023 | Jul 8, 2022 |
| Redhat_linux | — | Upgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-resolved-debuginfoUpgrade systemd-rpm-macrosUpgrade systemd-debuginfoUpgrade systemd-testsUpgrade systemd-oomd-debuginfoUpgrade systemd-udevNo solution existsUpgrade systemd-debugsourceUpgrade systemd-pamUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-containerUpgrade systemd-container-debuginfoUpgrade systemd-develUpgrade systemd-devel-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-resolvedUpgrade systemdUpgrade systemd-tests-debuginfoUpgrade systemd-oomdUpgrade systemd-libsUpgrade systemd-journal-remote-debuginfo | Jan 13, 2023 | Nov 8, 2022 |
| Rocky_linux | — | Upgrade systemd-journal-remote-debuginfoUpgrade systemd-oomdUpgrade systemd-devel-debuginfoUpgrade systemd-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-resolvedUpgrade systemd-pam-debuginfoUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-oomd-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-debugsourceUpgrade systemd-udevUpgrade systemd-resolved-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemdUpgrade systemd-libs-debuginfo | Mar 12, 2024 | Nov 8, 2022 |
| Suse | — | Upgrade libudev1-32bitUpgrade libsystemd0-32bitUpgrade systemd-docUpgrade systemd-portableUpgrade systemd-sysvinitUpgrade libudev-develUpgrade systemd-experimentalUpgrade nss-systemdUpgrade systemd-containerUpgrade systemdUpgrade nss-resolveUpgrade systemd-bash-completionUpgrade nss-mymachines-32bitUpgrade nss-myhostname-32bitUpgrade nss-myhostnameUpgrade systemd-coredumpUpgrade systemd-32bitUpgrade libudev1Upgrade systemd-loggerUpgrade systemd-langUpgrade nss-mymachinesUpgrade systemd-networkUpgrade systemd-develUpgrade libudev-devel-32bitUpgrade udevUpgrade systemd-journal-remoteUpgrade libsystemd0Upgrade systemd-testsuite | Nov 16, 2022 | Nov 8, 2022 |
| Ubuntu | — | Upgrade systemdUpgrade systemd (Ubuntu Pro) | Mar 22, 2023 | Nov 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub