An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-pamUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-oomdUpgrade systemdUpgrade systemd-testsUpgrade systemd-udevUpgrade systemd-rpm-macrosUpgrade systemd-journal-remote | Jan 17, 2023 | Nov 8, 2022 |
| Amazon Linux Ami 2 | — | Upgrade systemd-journal-gatewayUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemdUpgrade systemd-resolvedUpgrade systemd-pythonUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-develUpgrade systemd-networkdUpgrade systemd-debuginfo | Dec 7, 2022 | Nov 8, 2022 |
| Centos_linux | — | Upgrade systemd-oomdUpgrade systemd-udev-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-libsUpgrade systemd-journal-remote-debuginfoUpgrade systemd-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-develUpgrade systemd-containerUpgrade systemd-devel-debuginfoUpgrade systemd-resolvedUpgrade systemd-testsUpgrade systemd-container-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-pamUpgrade systemd-rpm-macrosUpgrade systemd-debugsourceUpgrade systemd-libs-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemdUpgrade systemd-resolved-debuginfoUpgrade systemd-udev | Jan 13, 2023 | Nov 8, 2022 |
| Debian | — | Upgrade systemd | Jul 4, 2023 | Nov 8, 2022 |
| Gentoo Linux | — | Upgrade sys-apps/systemd-tmpfiles.Upgrade sys-apps/systemd-utils.Upgrade sys-fs/udev.Upgrade sys-apps/systemd. | May 4, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-nspawnUpgrade systemd-resolvedUpgrade systemdUpgrade systemd-libsUpgrade systemd-networkdUpgrade systemd-timesyncdUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-container | Feb 13, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-networkdUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-nspawnUpgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-timesyncdUpgrade systemd | Jan 6, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemdUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-journal-remoteUpgrade systemd-pamUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-container | Feb 9, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-libsUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd | Jan 9, 2023 | Nov 8, 2022 |
| Oracle_linux | — | Upgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-oomdUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-rpm-macrosUpgrade systemd-containerUpgrade systemd-testsUpgrade systemd-udev | Jan 14, 2023 | Jul 8, 2022 |
| Redhat_linux | — | Upgrade systemd-tests-debuginfoUpgrade systemd-pamUpgrade systemd-debugsourceUpgrade systemd-resolvedUpgrade systemd-libs-debuginfoUpgrade systemd-devel-debuginfoUpgrade systemd-oomdUpgrade systemd-develUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-libsUpgrade systemdUpgrade systemd-journal-remote-debuginfoUpgrade systemd-containerUpgrade systemd-container-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-resolved-debuginfoUpgrade systemd-udevNo solution existsUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-testsUpgrade systemd-journal-remoteUpgrade systemd-oomd-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-debuginfoUpgrade systemd-rpm-macros | Jan 13, 2023 | Nov 8, 2022 |
| Rocky_linux | — | Upgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-udev-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-devel-debuginfoUpgrade systemd-oomdUpgrade systemd-pam-debuginfoUpgrade systemd-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-resolved-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-container-debuginfoUpgrade systemd-debugsourceUpgrade systemd-libs-debuginfoUpgrade systemd-udevUpgrade systemd-develUpgrade systemd | Mar 12, 2024 | Nov 8, 2022 |
| Suse | — | Upgrade systemd-testsuiteUpgrade systemd-bash-completionUpgrade systemd-networkUpgrade systemd-containerUpgrade systemd-32bitUpgrade nss-mymachines-32bitUpgrade nss-resolveUpgrade systemdUpgrade systemd-coredumpUpgrade nss-myhostname-32bitUpgrade nss-mymachinesUpgrade libsystemd0Upgrade libudev-devel-32bitUpgrade systemd-langUpgrade udevUpgrade libudev1Upgrade nss-myhostnameUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemd-loggerUpgrade systemd-experimentalUpgrade libsystemd0-32bitUpgrade systemd-portableUpgrade systemd-docUpgrade nss-systemdUpgrade libudev-develUpgrade libudev1-32bitUpgrade systemd-sysvinit | Nov 16, 2022 | Nov 8, 2022 |
| Ubuntu | — | Upgrade systemdUpgrade systemd (Ubuntu Pro) | Mar 22, 2023 | Nov 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub