An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-develUpgrade systemd-libsUpgrade systemd-oomdUpgrade systemd-pamUpgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-udevUpgrade systemd-testsUpgrade systemd-rpm-macros | Jan 17, 2023 | Nov 8, 2022 |
| Amazon Linux Ami 2 | — | Upgrade systemdUpgrade systemd-sysvUpgrade systemd-journal-gatewayUpgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-develUpgrade systemd-networkd | Dec 7, 2022 | Nov 8, 2022 |
| Centos_linux | — | Upgrade systemd-debugsourceUpgrade systemd-testsUpgrade systemdUpgrade systemd-tests-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-udevUpgrade systemd-libs-debuginfoUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-resolved-debuginfoUpgrade systemd-rpm-macrosUpgrade systemd-oomdUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-oomd-debuginfoUpgrade systemd-devel-debuginfoUpgrade systemd-resolvedUpgrade systemd-udev-debuginfoUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-develUpgrade systemd-debuginfo | Jan 13, 2023 | Nov 8, 2022 |
| Debian | — | Upgrade systemd | Jul 4, 2023 | Nov 8, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/systemd-tmpfiles.Upgrade sys-apps/systemd-utils.Upgrade sys-apps/systemd.Upgrade sys-fs/udev. | May 4, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-libsUpgrade systemd-timesyncdUpgrade systemd-networkdUpgrade systemd-nspawnUpgrade systemdUpgrade systemd-resolved | Feb 13, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-libsUpgrade systemdUpgrade systemd-nspawnUpgrade systemd-containerUpgrade systemd-resolvedUpgrade systemd-timesyncdUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-networkdUpgrade systemd-pam | Jan 6, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-udev-compatUpgrade systemd-udevUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-container | Feb 9, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemdUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-libs | Jan 9, 2023 | Nov 8, 2022 |
| Oracle_linux | — | Upgrade systemd-oomdUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-rpm-macrosUpgrade systemd | Jan 14, 2023 | Jul 8, 2022 |
| Redhat_linux | — | Upgrade systemd-container-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-resolvedUpgrade systemd-pamUpgrade systemdUpgrade systemd-libsUpgrade systemd-oomdUpgrade systemd-tests-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-develUpgrade systemd-devel-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-containerUpgrade systemd-libs-debuginfoUpgrade systemd-debugsourceUpgrade systemd-debuginfoUpgrade systemd-resolved-debuginfoUpgrade systemd-rpm-macrosUpgrade systemd-testsUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-udevNo solution existsUpgrade systemd-pam-debuginfoUpgrade systemd-journal-remote | Jan 13, 2023 | Nov 8, 2022 |
| Rocky_linux | — | Upgrade systemd-resolvedUpgrade systemd-oomd-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-libsUpgrade systemd-oomdUpgrade systemd-pamUpgrade systemd-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-containerUpgrade systemd-journal-remote-debuginfoUpgrade systemd-devel-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemdUpgrade systemd-debugsourceUpgrade systemd-container-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-resolved-debuginfoUpgrade systemd-udev | Mar 12, 2024 | Nov 8, 2022 |
| Suse | — | Upgrade libudev1-32bitUpgrade libsystemd0-32bitUpgrade systemd-portableUpgrade nss-systemdUpgrade systemd-experimentalUpgrade systemd-sysvinitUpgrade libudev-develUpgrade systemd-docUpgrade systemd-32bitUpgrade systemd-networkUpgrade libudev-devel-32bitUpgrade libsystemd0Upgrade systemd-develUpgrade systemdUpgrade nss-myhostname-32bitUpgrade nss-myhostnameUpgrade systemd-bash-completionUpgrade systemd-coredumpUpgrade udevUpgrade libudev1Upgrade systemd-journal-remoteUpgrade systemd-containerUpgrade nss-mymachines-32bitUpgrade systemd-langUpgrade systemd-testsuiteUpgrade nss-resolveUpgrade systemd-loggerUpgrade nss-mymachines | Nov 16, 2022 | Nov 8, 2022 |
| Ubuntu | — | Upgrade systemd (Ubuntu Pro)Upgrade systemd | Mar 22, 2023 | Nov 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub