An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-libsUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-oomdUpgrade systemd-resolvedUpgrade systemd-develUpgrade systemd-rpm-macrosUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemdUpgrade systemd-tests | Jan 17, 2023 | Nov 8, 2022 |
| Amazon Linux Ami 2 | — | Upgrade systemd-pythonUpgrade systemd-debuginfoUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemdUpgrade systemd-sysvUpgrade systemd-journal-gatewayUpgrade libgudev1-devel | Dec 7, 2022 | Nov 8, 2022 |
| Centos_linux | — | Upgrade systemd-udevUpgrade systemd-testsUpgrade systemd-resolved-debuginfoUpgrade systemd-rpm-macrosUpgrade systemd-container-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-libs-debuginfoUpgrade systemd-pamUpgrade systemdUpgrade systemd-tests-debuginfoUpgrade systemd-debugsourceUpgrade systemd-develUpgrade systemd-oomdUpgrade systemd-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-resolvedUpgrade systemd-devel-debuginfoUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-pam-debuginfo | Jan 13, 2023 | Nov 8, 2022 |
| Debian | — | Upgrade systemd | Jul 4, 2023 | Nov 8, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/systemd-utils.Upgrade sys-apps/systemd-tmpfiles.Upgrade sys-apps/systemd.Upgrade sys-fs/udev. | May 4, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-pamUpgrade systemd-containerUpgrade systemd-udev-compatUpgrade systemd-libsUpgrade systemd-nspawnUpgrade systemd-udevUpgrade systemd-networkdUpgrade systemdUpgrade systemd-timesyncdUpgrade systemd-resolved | Feb 13, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemdUpgrade systemd-nspawnUpgrade systemd-timesyncdUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-udevUpgrade systemd-networkdUpgrade systemd-udev-compat | Jan 6, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-libsUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-develUpgrade systemd-udev-compatUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-udev | Feb 9, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-udevUpgrade systemd-containerUpgrade systemdUpgrade systemd-libsUpgrade systemd-udev-compat | Jan 9, 2023 | Nov 8, 2022 |
| Oracle_linux | — | Upgrade systemd-develUpgrade systemd-pamUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-oomdUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-rpm-macrosUpgrade systemdUpgrade systemd-journal-remote | Jan 14, 2023 | Jul 8, 2022 |
| Redhat_linux | — | Upgrade systemd-udev-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-pamUpgrade systemd-devel-debuginfoUpgrade systemd-develUpgrade systemd-tests-debuginfoUpgrade systemd-oomdUpgrade systemd-resolvedUpgrade systemd-libs-debuginfoUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-journal-remote-debuginfoUpgrade systemd-debugsourceUpgrade systemdUpgrade systemd-debuginfoUpgrade systemd-testsUpgrade systemd-resolved-debuginfoUpgrade systemd-pam-debuginfoNo solution existsUpgrade systemd-journal-remoteUpgrade systemd-oomd-debuginfoUpgrade systemd-udevUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-rpm-macros | Jan 13, 2023 | Nov 8, 2022 |
| Rocky_linux | — | Upgrade systemd-pamUpgrade systemd-pam-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-udev-debuginfoUpgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-devel-debuginfoUpgrade systemd-oomdUpgrade systemd-journal-remote-debuginfoUpgrade systemd-develUpgrade systemdUpgrade systemd-resolved-debuginfoUpgrade systemd-debugsourceUpgrade systemd-container-debuginfoUpgrade systemd-udevUpgrade systemd-libs-debuginfoUpgrade systemd-journal-remote | Mar 12, 2024 | Nov 8, 2022 |
| Suse | — | Upgrade nss-systemdUpgrade systemd-experimentalUpgrade libsystemd0-32bitUpgrade systemd-sysvinitUpgrade systemd-docUpgrade libudev-develUpgrade systemd-portableUpgrade libudev1-32bitUpgrade libsystemd0Upgrade systemd-bash-completionUpgrade systemdUpgrade nss-myhostname-32bitUpgrade nss-resolveUpgrade systemd-networkUpgrade systemd-loggerUpgrade systemd-testsuiteUpgrade systemd-journal-remoteUpgrade libudev-devel-32bitUpgrade systemd-develUpgrade nss-myhostnameUpgrade nss-mymachines-32bitUpgrade libudev1Upgrade nss-mymachinesUpgrade systemd-langUpgrade systemd-32bitUpgrade udevUpgrade systemd-containerUpgrade systemd-coredump | Nov 16, 2022 | Nov 8, 2022 |
| Ubuntu | — | Upgrade systemdUpgrade systemd (Ubuntu Pro) | Mar 22, 2023 | Nov 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub