An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-pamUpgrade systemd-resolvedUpgrade systemd-oomdUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-testsUpgrade systemd-rpm-macrosUpgrade systemd-udev | Jan 17, 2023 | Nov 8, 2022 |
| Amazon Linux Ami 2 | — | Upgrade libgudev1-develUpgrade systemd-journal-gatewayUpgrade systemd-sysvUpgrade systemdUpgrade systemd-develUpgrade libgudev1Upgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade systemd-networkd | Dec 7, 2022 | Nov 8, 2022 |
| Centos_linux | — | Upgrade systemdUpgrade systemd-rpm-macrosUpgrade systemd-debugsourceUpgrade systemd-tests-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfoUpgrade systemd-udevUpgrade systemd-resolved-debuginfoUpgrade systemd-testsUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-oomdUpgrade systemd-containerUpgrade systemd-resolvedUpgrade systemd-devel-debuginfoUpgrade systemd-libs | Jan 13, 2023 | Nov 8, 2022 |
| Debian | — | Upgrade systemd | Jul 4, 2023 | Nov 8, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/systemd-utils.Upgrade sys-apps/systemd-tmpfiles.Upgrade sys-fs/udev.Upgrade sys-apps/systemd. | May 4, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-libsUpgrade systemd-nspawnUpgrade systemdUpgrade systemd-resolvedUpgrade systemd-udevUpgrade systemd-networkdUpgrade systemd-timesyncdUpgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-container | Feb 13, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-timesyncdUpgrade systemd-libsUpgrade systemd-nspawnUpgrade systemdUpgrade systemd-pamUpgrade systemd-networkdUpgrade systemd-udev-compatUpgrade systemd-udev | Jan 6, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade systemd-containerUpgrade systemd-pamUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemd-udev-compat | Feb 9, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-udev-compatUpgrade systemd-libsUpgrade systemd-udevUpgrade systemdUpgrade systemd-container | Jan 9, 2023 | Nov 8, 2022 |
| Oracle_linux | — | Upgrade systemd-oomdUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-pamUpgrade systemd-testsUpgrade systemdUpgrade systemd-udevUpgrade systemd-rpm-macrosUpgrade systemd-containerUpgrade systemd-journal-remote | Jan 14, 2023 | Jul 8, 2022 |
| Redhat_linux | — | Upgrade systemd-devel-debuginfoUpgrade systemd-develUpgrade systemd-oomdUpgrade systemd-containerUpgrade systemd-tests-debuginfoUpgrade systemd-resolvedUpgrade systemd-libs-debuginfoUpgrade systemd-debugsourceUpgrade systemd-journal-remote-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-pamUpgrade systemdUpgrade systemd-libsUpgrade systemd-container-debuginfoUpgrade systemd-testsUpgrade systemd-journal-remoteNo solution existsUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-resolved-debuginfoUpgrade systemd-rpm-macrosUpgrade systemd-oomd-debuginfoUpgrade systemd-debuginfoUpgrade systemd-udevUpgrade systemd-pam-debuginfo | Jan 13, 2023 | Nov 8, 2022 |
| Rocky_linux | — | Upgrade systemd-pamUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-devel-debuginfoUpgrade systemd-oomdUpgrade systemd-pam-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-resolved-debuginfoUpgrade systemd-libs-debuginfoUpgrade systemd-udevUpgrade systemd-journal-remoteUpgrade systemd-debugsourceUpgrade systemd-container-debuginfoUpgrade systemdUpgrade systemd-devel | Mar 12, 2024 | Nov 8, 2022 |
| Suse | — | Upgrade libudev1-32bitUpgrade libudev-develUpgrade systemd-experimentalUpgrade systemd-sysvinitUpgrade systemd-portableUpgrade nss-systemdUpgrade libsystemd0-32bitUpgrade systemd-docUpgrade nss-resolveUpgrade nss-myhostname-32bitUpgrade nss-myhostnameUpgrade systemd-bash-completionUpgrade udevUpgrade systemd-journal-remoteUpgrade systemd-coredumpUpgrade systemdUpgrade nss-mymachines-32bitUpgrade systemd-testsuiteUpgrade systemd-networkUpgrade libudev-devel-32bitUpgrade libsystemd0Upgrade libudev1Upgrade systemd-32bitUpgrade systemd-containerUpgrade nss-mymachinesUpgrade systemd-langUpgrade systemd-develUpgrade systemd-logger | Nov 16, 2022 | Nov 8, 2022 |
| Ubuntu | — | Upgrade systemdUpgrade systemd (Ubuntu Pro) | Mar 22, 2023 | Nov 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub