An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-oomdUpgrade systemd-pamUpgrade systemd-libsUpgrade systemd-testsUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemdUpgrade systemd-rpm-macros | Jan 17, 2023 | Nov 8, 2022 |
| Amazon Linux Ami 2 | — | Upgrade systemd-develUpgrade systemd-networkdUpgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-sysvUpgrade systemd-journal-gatewayUpgrade libgudev1-develUpgrade systemd | Dec 7, 2022 | Nov 8, 2022 |
| Centos_linux | — | Upgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-resolvedUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-udev-debuginfoUpgrade systemd-devel-debuginfoUpgrade systemd-oomdUpgrade systemd-develUpgrade systemd-pam-debuginfoUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-pamUpgrade systemd-libs-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-testsUpgrade systemdUpgrade systemd-debugsourceUpgrade systemd-resolved-debuginfoUpgrade systemd-rpm-macrosUpgrade systemd-udev | Jan 13, 2023 | Nov 8, 2022 |
| Debian | — | Upgrade systemd | Jul 4, 2023 | Nov 8, 2022 |
| Gentoo Linux | — | Upgrade sys-fs/udev.Upgrade sys-apps/systemd.Upgrade sys-apps/systemd-utils.Upgrade sys-apps/systemd-tmpfiles. | May 4, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade systemd-pamUpgrade systemd-containerUpgrade systemd-udev-compatUpgrade systemd-udevUpgrade systemd-libsUpgrade systemd-timesyncdUpgrade systemd-networkdUpgrade systemd-nspawnUpgrade systemdUpgrade systemd-resolved | Feb 13, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade systemd-resolvedUpgrade systemd-nspawnUpgrade systemdUpgrade systemd-containerUpgrade systemd-libsUpgrade systemd-timesyncdUpgrade systemd-udevUpgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemd-networkd | Jan 6, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-udevUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-pam | Feb 9, 2023 | Nov 8, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-libsUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemdUpgrade systemd-udev | Jan 9, 2023 | Nov 8, 2022 |
| Oracle_linux | — | Upgrade systemd-pamUpgrade systemd-oomdUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-develUpgrade systemd-containerUpgrade systemd-rpm-macrosUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemdUpgrade systemd-tests | Jan 14, 2023 | Jul 8, 2022 |
| Redhat_linux | — | Upgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-debugsourceUpgrade systemd-standalone-sysusers-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-devel-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-pamUpgrade systemd-container-debuginfoUpgrade systemdUpgrade systemd-libs-debuginfoUpgrade systemd-oomdUpgrade systemd-tests-debuginfoUpgrade systemd-develUpgrade systemd-resolved-debuginfoUpgrade systemd-oomd-debuginfoNo solution existsUpgrade systemd-debuginfoUpgrade systemd-udevUpgrade systemd-testsUpgrade systemd-journal-remoteUpgrade systemd-standalone-tmpfiles-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-rpm-macros | Jan 13, 2023 | Nov 8, 2022 |
| Rocky_linux | — | Upgrade systemd-libs-debuginfoUpgrade systemd-journal-remoteUpgrade systemdUpgrade systemd-udevUpgrade systemd-resolved-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-debugsourceUpgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-libsUpgrade systemd-containerUpgrade systemd-pamUpgrade systemd-udev-debuginfoUpgrade systemd-devel-debuginfoUpgrade systemd-journal-remote-debuginfoUpgrade systemd-oomd-debuginfoUpgrade systemd-pam-debuginfoUpgrade systemd-oomdUpgrade systemd-debuginfo | Mar 12, 2024 | Nov 8, 2022 |
| Suse | — | Upgrade udevUpgrade systemdUpgrade systemd-journal-remoteUpgrade systemd-32bitUpgrade libudev-devel-32bitUpgrade libsystemd0Upgrade systemd-containerUpgrade libudev1Upgrade nss-myhostnameUpgrade systemd-coredumpUpgrade nss-myhostname-32bitUpgrade nss-mymachines-32bitUpgrade systemd-develUpgrade systemd-bash-completionUpgrade systemd-loggerUpgrade systemd-testsuiteUpgrade systemd-networkUpgrade nss-resolveUpgrade systemd-langUpgrade nss-mymachinesUpgrade systemd-sysvinitUpgrade nss-systemdUpgrade systemd-docUpgrade libsystemd0-32bitUpgrade systemd-experimentalUpgrade libudev-develUpgrade libudev1-32bitUpgrade systemd-portable | Nov 16, 2022 | Nov 8, 2022 |
| Ubuntu | — | Upgrade systemdUpgrade systemd (Ubuntu Pro) | Mar 22, 2023 | Nov 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub