Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redosRedosROS-20240403-04
HistoryApr 03, 2024 - 12:00 a.m.

ROS-20240403-04

2024-04-0300:00:00
redos.red-soft.ru
2
systemd
vulnerability
dns
exploitation
remote intruder
information security

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

59.0%

JSON

Vulnerability of on_stream_io() and dns_stream_complete() functions of the subsystem of initialization and management of services
Systemd is related to not incrementing the reference count for the DnsStream object. Exploitation of the vulnerability could
allow a remote intruder to violate the integrity and availability of protected information

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64systemd<= 246.10-6UNKNOWN

Related

nessus 27
osv 5
openvas 8
cloudfoundry 2
ibm 14
ubuntucve 1
redhat 30
ubuntu 2
redhatcve 1
oraclelinux 2
prion 1
cve 1
almalinux 1
veracode 1
debiancve 1
f5 1
centos 1
rocky 1
photon 1
amazon 1
oracle 1
nessus
nessus
AlmaLinux 8 : systemd (ALSA-2022:6206)
2022-09-07 00:00:00
RHEL 8 : systemd (RHSA-2022:6206)
2022-08-30 00:00:00
CentOS 7 : systemd (CESA-2022:6160)
2022-09-01 00:00:00
osv
osv
Important: systemd security update
2022-08-29 00:00:00
systemd vulnerability
2022-08-29 08:54:00
CVE-2022-2526
2022-09-09 15:15:10
openvas
openvas
Ubuntu: Security Advisory (USN-5583-1)
2022-08-31 00:00:00
CentOS: Security Advisory for libgudev1-219-78.el7_ (CESA-2022:6160)
2022-09-02 00:00:00
Ubuntu: Security Advisory (USN-5583-2)
2022-09-16 00:00:00
cloudfoundry
cloudfoundry
USN-5583-1: systemd vulnerability | Cloud Foundry
2022-09-29 00:00:00
USN-5583-2: systemd regression | Cloud Foundry
2022-09-29 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an arbitrary code execution in systemd (CVE-2022-2526)
2023-03-31 16:54:28
Security Bulletin: systemd vulnerability may affect IBM Elastic Storage System (CVE-2021-4203)
2022-12-12 09:37:59
Security Bulletin: Multiple Vulnerabilities in base image packages
2022-10-07 20:52:32
ubuntucve
ubuntucve
CVE-2022-2526
2022-08-24 00:00:00
redhat
redhat
(RHSA-2022:6206) Important: systemd security update
2022-08-29 15:56:37
(RHSA-2022:6163) Important: systemd security update
2022-08-24 15:26:30
(RHSA-2022:6162) Important: systemd security update
2022-08-24 15:21:11
ubuntu
ubuntu
systemd regression
2022-09-14 00:00:00
systemd vulnerability
2022-08-29 00:00:00
redhatcve
redhatcve
CVE-2022-2526
2022-08-19 13:38:44
oraclelinux
oraclelinux
systemd security update
2022-08-29 00:00:00
systemd security update
2022-08-25 00:00:00
prion
prion
Design/Logic Flaw
2022-09-09 15:15:00
cve
cve
CVE-2022-2526
2022-09-09 15:15:00
almalinux
almalinux
Important: systemd security update
2022-08-29 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-10-05 22:31:55
debiancve
debiancve
CVE-2022-2526
2022-09-09 15:15:00
f5
f5
K000132680 : systemd vulnerability CVE-2022-2526
2023-02-21 00:00:00
centos
centos
libgudev1, systemd security update
2022-09-01 22:04:07
rocky
rocky
systemd security update
2022-08-29 15:56:37
photon
photon
Critical Photon OS Security Update - PHSA-2022-3.0-0456
2022-09-21 00:00:00
amazon
amazon
Important: systemd
2022-09-30 07:04:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

59.0%

JSON
Related for ROS-20240403-04
nessus27osv5openvas8cloudfoundry2ibm14ubuntucve1redhat30ubuntu2redhatcve1oraclelinux2prion1cve1almalinux1veracode1debiancve1f51centos1rocky1photon1amazon1oracle1