An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libgudev1-develUpgrade systemd-develUpgrade systemd-networkdUpgrade systemd-journal-gatewayUpgrade systemd-sysvUpgrade systemd-resolvedUpgrade systemdUpgrade libgudev1Upgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-debuginfo | Apr 27, 2020 | Jan 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 11, 2019 |
| Centos_linux | — | Upgrade systemd-networkdUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemdUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-debuginfoUpgrade systemd-journal-gatewayUpgrade libgudev1 | Jan 16, 2019 | Jan 9, 2019 |
| Debian | — | Upgrade systemd | Jan 14, 2019 | Jan 9, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 25, 2020 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-pythonUpgrade systemdUpgrade systemd-develUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-sysv | Feb 22, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-pythonUpgrade libgudev1Upgrade systemd-develUpgrade systemd-libsUpgrade systemd | Mar 27, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemdUpgrade systemd-libsUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-sysv | Feb 15, 2019 | Jan 11, 2019 |
| Oracle_linux | — | Upgrade systemd-journal-gatewayUpgrade systemd-develUpgrade systemdUpgrade systemd-networkdUpgrade systemd-libsUpgrade systemd-pythonUpgrade libgudev1-develUpgrade systemd-resolvedUpgrade libgudev1Upgrade systemd-sysv | Jul 21, 2020 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade libgudev1-develUpgrade systemd-debuginfoUpgrade libgudev1Upgrade systemd-develUpgrade systemd-resolvedUpgrade systemd-networkdUpgrade systemd-sysvUpgrade systemdUpgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-journal-gateway | Jan 15, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade systemd-mini-bash-completionUpgrade libudev-mini-develUpgrade udevUpgrade nss-systemdUpgrade libudev1Upgrade systemd-mini-sysvinitUpgrade systemd-miniUpgrade libudev1-32bitUpgrade libudev-devel-32bitUpgrade libsystemd0-miniUpgrade nss-mymachinesUpgrade nss-mymachines-32bitUpgrade libgudev-1_0-0Upgrade systemd-containerUpgrade systemd-develUpgrade systemd-bash-completionUpgrade systemd-coredumpUpgrade libgudev-1_0-0-32bitUpgrade systemd-mini-container-miniUpgrade systemdUpgrade systemd-sysvinitUpgrade systemd-loggerUpgrade typelib-1_0-GUdev-1_0Upgrade systemd-docUpgrade systemd-mini-develUpgrade libsystemd0Upgrade libgudev-1_0-develUpgrade libsystemd0-32bitUpgrade libudev-mini1Upgrade systemd-mini-coredump-miniUpgrade systemd-32bitUpgrade nss-myhostnameUpgrade libudev-develUpgrade systemd-journal-remoteUpgrade systemd-langUpgrade udev-miniUpgrade nss-myhostname-32bit | Jan 10, 2019 | Jan 9, 2019 |
| Ubuntu | — | Upgrade systemd | Jan 23, 2019 | Jan 9, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub