vulnerability
Oracle Linux: CVE-2020-1712: ELSA-2020-0575: systemd security and bug fix update (IMPORTANT) (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:S/C:C/I:C/A:C) | Feb 5, 2020 | Oct 5, 2022 | Jan 7, 2025 |
Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
Feb 5, 2020
Added
Oct 5, 2022
Modified
Jan 7, 2025
Description
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
A heap use-after-free vulnerability was found in systemd, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
A heap use-after-free vulnerability was found in systemd, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
Solution(s)
oracle-linux-upgrade-systemdoracle-linux-upgrade-systemd-containeroracle-linux-upgrade-systemd-develoracle-linux-upgrade-systemd-journal-remoteoracle-linux-upgrade-systemd-libsoracle-linux-upgrade-systemd-pamoracle-linux-upgrade-systemd-testsoracle-linux-upgrade-systemd-udev
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.