An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-debuginfoUpgrade systemd-resolvedUpgrade systemd-sysvUpgrade systemd-networkdUpgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-develUpgrade systemd-pythonUpgrade systemdUpgrade libgudev1Upgrade systemd-journal-gateway | Apr 27, 2020 | Jan 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 11, 2019 |
| Centos_linux | — | Upgrade systemdUpgrade libgudev1Upgrade systemd-networkdUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade systemd-develUpgrade systemd-journal-gatewayUpgrade systemd-libs | Aug 28, 2019 | Jan 11, 2019 |
| Debian | — | Upgrade systemd | Jan 14, 2019 | Jan 11, 2019 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Mar 11, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-develUpgrade libgudev1Upgrade systemd-pythonUpgrade systemd-libsUpgrade libgudev1-develUpgrade systemdUpgrade systemd-sysv | Jul 23, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libgudev1Upgrade systemd-libsUpgrade systemd-develUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemdUpgrade systemd-python | Sep 25, 2019 | Jan 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-libsUpgrade systemd-develUpgrade libgudev1Upgrade systemdUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-udev-compatUpgrade systemd-python | Nov 19, 2019 | Jan 11, 2019 |
| Oracle_linux | — | Upgrade systemd-pythonUpgrade systemdUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-journal-gatewayUpgrade systemd-resolvedUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-networkd | Jul 21, 2020 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade systemd-networkdUpgrade systemdUpgrade systemd-sysvUpgrade libgudev1Upgrade systemd-journal-gatewayUpgrade systemd-pythonUpgrade systemd-debuginfoUpgrade libgudev1-develUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-devel | Aug 7, 2019 | Jan 11, 2019 |
| Suse | — | Upgrade libsystemd0-32bitUpgrade systemd-miniUpgrade libsystemd0-miniUpgrade libudev-develUpgrade systemd-mini-sysvinitUpgrade systemd-containerUpgrade systemd-coredumpUpgrade nss-myhostnameUpgrade libudev1-32bitUpgrade libsystemd0Upgrade systemd-mini-container-miniUpgrade systemd-bash-completionUpgrade systemd-develUpgrade udevUpgrade systemd-loggerUpgrade libudev-mini-develUpgrade nss-systemdUpgrade nss-mymachinesUpgrade systemd-mini-coredump-miniUpgrade nss-mymachines-32bitUpgrade systemdUpgrade systemd-mini-bash-completionUpgrade libudev1Upgrade libudev-mini1Upgrade systemd-sysvinitUpgrade systemd-32bitUpgrade systemd-mini-develUpgrade libudev-devel-32bitUpgrade nss-myhostname-32bitUpgrade udev-mini | Jan 22, 2019 | Jan 11, 2019 |
| Ubuntu | — | Upgrade systemd | Jan 23, 2019 | Jan 11, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 11, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub