A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-pythonUpgrade systemdUpgrade systemd-sysvUpgrade systemd-resolvedUpgrade libgudev1Upgrade systemd-networkdUpgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-journal-gateway | Apr 27, 2020 | Mar 31, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 31, 2020 |
| Centos_linux | — | Upgrade systemd-udevUpgrade systemd-libs-debuginfoUpgrade systemdUpgrade systemd-testsUpgrade systemd-journal-remote-debuginfoUpgrade systemd-container-debuginfoUpgrade systemd-journal-remoteUpgrade systemd-tests-debuginfoUpgrade systemd-debuginfoUpgrade systemd-containerUpgrade systemd-debugsourceUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-pam-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-devel | Feb 25, 2020 | Feb 24, 2020 |
| Debian | — | Upgrade systemd | Jul 4, 2022 | Mar 31, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 16, 2020 | Mar 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade systemd-pamUpgrade systemd-containerUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemdUpgrade systemd-journal-remote | Mar 24, 2020 | Mar 23, 2020 |
| Oracle_linux | — | Upgrade systemd-containerUpgrade systemd-libsUpgrade systemd-testsUpgrade systemdUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemd-devel | Oct 5, 2022 | Feb 5, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Mar 31, 2020 |
| Redhat_linux | — | Upgrade systemd-journal-remote-debuginfoUpgrade systemd-debugsourceUpgrade systemd-libs-debuginfoUpgrade systemd-tests-debuginfoUpgrade systemd-testsUpgrade systemd-pamUpgrade systemd-journal-remoteUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-pam-debuginfoUpgrade systemd-debuginfoUpgrade systemd-udev-debuginfoUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-container-debuginfoUpgrade systemd | Feb 25, 2020 | Feb 24, 2020 |
| Suse | — | Upgrade libudev-develUpgrade systemd-langUpgrade libudev1-32bitUpgrade nss-myhostnameUpgrade udev-miniUpgrade libsystemd0Upgrade systemd-miniUpgrade systemd-mini-develUpgrade libsystemd0-32bitUpgrade libudev-mini1Upgrade systemdUpgrade systemd-bash-completionUpgrade systemd-mini-coredump-miniUpgrade systemd-coredumpUpgrade systemd-32bitUpgrade systemd-mini-container-miniUpgrade libudev-mini-develUpgrade systemd-docUpgrade systemd-containerUpgrade systemd-sysvinitUpgrade nss-myhostname-32bitUpgrade udevUpgrade nss-mymachinesUpgrade libudev-devel-32bitUpgrade systemd-loggerUpgrade libudev1Upgrade nss-mymachines-32bitUpgrade systemd-journal-remoteUpgrade systemd-mini-bash-completionUpgrade libsystemd0-miniUpgrade nss-systemdUpgrade systemd-develUpgrade systemd-mini-sysvinit | Feb 6, 2020 | Feb 5, 2020 |
| Ubuntu | — | Upgrade systemd | Feb 6, 2020 | Feb 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 31, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub