systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.
| Reporter | Title | Published | Views | Family All 50 |
|---|---|---|---|---|
 | Amazon Linux 2023 : systemd, systemd-container, systemd-devel (ALAS2023-2023-025) | 21 Mar 202300:00 | – | nessus |
| AlmaLinux 9 : systemd (ALSA-2023:0954) | 28 Feb 202300:00 | – | nessus |
| Fedora 36 : systemd (2022-ef4f57b072) | 31 Dec 202200:00 | – | nessus |
| GLSA-202405-04 : systemd: Multiple Vulnerabilities | 4 May 202400:00 | – | nessus |
| CBL Mariner 2.0 Security Update: systemd (CVE-2022-45873) | 20 Mar 202300:00 | – | nessus |
| MiracleLinux 9 : systemd-250-12.el9.3.ML.1 (AXSA:2023-5194:06) | 20 Jan 202600:00 | – | nessus |
| Oracle Linux 9 : systemd (ELSA-2023-0954) | 1 Mar 202300:00 | – | nessus |
| RHEL 9 : systemd (RHSA-2023:0954) | 28 Feb 202300:00 | – | nessus |
| RHEL 7 : systemd (Unpatched Vulnerability) | 11 May 202400:00 | – | nessus |
| Rocky Linux 9 : systemd (RLSA-2023:0954) | 6 Apr 202300:00 | – | nessus |
10
Node
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
30 Jun 2024 14:00Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.15.5
EPSS0.00254
SSVC