Lucene search

K
redosRedosROS-20240403-15
HistoryApr 03, 2024 - 12:00 a.m.

ROS-20240403-15

2024-04-0300:00:00
redos.red-soft.ru
4
systemd
vulnerability
alloca
strdup
systemd-tmpfiles
authentication
denial of service

6.1 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

7.1 High

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

49.0%

Vulnerability of alloca() and strdup() functions of Systemd service initialization and management subsystem is related to
uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker to cause a denial of
service

A vulnerability in systemd-tmpfiles of the Systemd initialization and service management subsystem is related to
recursion if too many nested directories are created in /tmp. Exploitation of the vulnerability could
allow an attacker to cause a denial of service

Vulnerability in the Systemd service initialization and management subsystem is related to bypassing authentication
through spoofing. Exploitation of the vulnerability could allow an attacker acting remotely to cause a
denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64systemd<= 249.12-2UNKNOWN

6.1 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

7.1 High

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

49.0%