A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-libgudev1amazon-linux-ami-2-upgrade-libgudev1-develamazon-linux-ami-2-upgrade-systemdamazon-linux-ami-2-upgrade-systemd-debuginfoamazon-linux-ami-2-upgrade-systemd-develamazon-linux-ami-2-upgrade-systemd-journal-gatewayamazon-linux-ami-2-upgrade-systemd-libsamazon-linux-ami-2-upgrade-systemd-networkdamazon-linux-ami-2-upgrade-systemd-pythonamazon-linux-ami-2-upgrade-systemd-resolvedamazon-linux-ami-2-upgrade-systemd-sysv | Apr 27, 2020 | Mar 31, 2020 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 31, 2020 | |
| Centos_linux | — | centos-upgrade-systemdcentos-upgrade-systemd-containercentos-upgrade-systemd-container-debuginfocentos-upgrade-systemd-debuginfocentos-upgrade-systemd-debugsourcecentos-upgrade-systemd-develcentos-upgrade-systemd-journal-remotecentos-upgrade-systemd-journal-remote-debuginfocentos-upgrade-systemd-libscentos-upgrade-systemd-libs-debuginfocentos-upgrade-systemd-pamcentos-upgrade-systemd-pam-debuginfocentos-upgrade-systemd-testscentos-upgrade-systemd-tests-debuginfocentos-upgrade-systemd-udevcentos-upgrade-systemd-udev-debuginfo | Feb 25, 2020 | Feb 24, 2020 |
| Debian | debian-upgrade-systemd | Jul 4, 2022 | Mar 31, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-apps-systemd | Mar 16, 2020 | Mar 15, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-systemdhuawei-euleros-2_0_sp8-upgrade-systemd-containerhuawei-euleros-2_0_sp8-upgrade-systemd-develhuawei-euleros-2_0_sp8-upgrade-systemd-journal-remotehuawei-euleros-2_0_sp8-upgrade-systemd-libshuawei-euleros-2_0_sp8-upgrade-systemd-pamhuawei-euleros-2_0_sp8-upgrade-systemd-udevhuawei-euleros-2_0_sp8-upgrade-systemd-udev-compat | Mar 24, 2020 | Mar 23, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-systemdoracle-linux-upgrade-systemd-containeroracle-linux-upgrade-systemd-develoracle-linux-upgrade-systemd-journal-remoteoracle-linux-upgrade-systemd-libsoracle-linux-upgrade-systemd-pamoracle-linux-upgrade-systemd-testsoracle-linux-upgrade-systemd-udev | Oct 5, 2022 | Feb 5, 2020 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Dec 29, 2020 | Mar 31, 2020 | |
| Redhat_linux | redhat-upgrade-systemdredhat-upgrade-systemd-containerredhat-upgrade-systemd-container-debuginforedhat-upgrade-systemd-debuginforedhat-upgrade-systemd-debugsourceredhat-upgrade-systemd-develredhat-upgrade-systemd-journal-remoteredhat-upgrade-systemd-journal-remote-debuginforedhat-upgrade-systemd-libsredhat-upgrade-systemd-libs-debuginforedhat-upgrade-systemd-pamredhat-upgrade-systemd-pam-debuginforedhat-upgrade-systemd-testsredhat-upgrade-systemd-tests-debuginforedhat-upgrade-systemd-udevredhat-upgrade-systemd-udev-debuginfo | Feb 25, 2020 | Feb 24, 2020 | |
| Suse | — | suse-upgrade-libsystemd0suse-upgrade-libsystemd0-32bitsuse-upgrade-libsystemd0-minisuse-upgrade-libudev-develsuse-upgrade-libudev-devel-32bitsuse-upgrade-libudev-mini-develsuse-upgrade-libudev-mini1suse-upgrade-libudev1suse-upgrade-libudev1-32bitsuse-upgrade-nss-myhostnamesuse-upgrade-nss-myhostname-32bitsuse-upgrade-nss-mymachinessuse-upgrade-nss-mymachines-32bitsuse-upgrade-nss-systemdsuse-upgrade-systemdsuse-upgrade-systemd-32bitsuse-upgrade-systemd-bash-completionsuse-upgrade-systemd-containersuse-upgrade-systemd-coredumpsuse-upgrade-systemd-develsuse-upgrade-systemd-docsuse-upgrade-systemd-journal-remotesuse-upgrade-systemd-langsuse-upgrade-systemd-loggersuse-upgrade-systemd-minisuse-upgrade-systemd-mini-bash-completionsuse-upgrade-systemd-mini-container-minisuse-upgrade-systemd-mini-coredump-minisuse-upgrade-systemd-mini-develsuse-upgrade-systemd-mini-sysvinitsuse-upgrade-systemd-sysvinitsuse-upgrade-udevsuse-upgrade-udev-mini | Feb 6, 2020 | Feb 5, 2020 |
| Ubuntu | ubuntu-upgrade-systemd | Feb 6, 2020 | Feb 5, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub