Security Bulletin: systemd vulnerability may affect IBM Elastic Storage System (CVE-2021-4203)

Summary There is a vulnerability in systemd, used by IBM Elastic Storage System, which could allow a denial of service. Vulnerability Details CVEID:CVE-2022-2526 DESCRIPTION: systemd could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free flaw due to the...

Amazon Linux 2022 : systemd (ALAS2022-2022-219)

The version of systemd installed on the remote host is prior to 250.8-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-219 advisory. - A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when to...

CVE-2022-3821 affecting package systemd for versions less than 250.3-10

CVE-2022-3821 affecting package systemd for versions less than 250.3-10. A patched version of the package is available...

PT-2023-8454

Name of the Vulnerable Software and Affected Versions systemd-resolved affected versions not specified Description The issue is related to insufficient authentication checks of messages from DNS clients in the systemd-resolved service, which manages network connections and domain name resolutions...

Amazon Linux 2 : systemd (ALAS-2022-1899)

The version of systemd installed on the remote host is prior to 219-78. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1899 advisory. An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific...

CVE-2022-3821 affecting package systemd 239-42

CVE-2022-3821 affecting package systemd 239-42. A patched version of the package is available...

Medium: systemd

Issue Overview: An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in formattimespan, leading to a Denial of Service. CVE-2022-3821 Affected Packages: systemd...

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.

...

OPENSUSE-SU-2022:10222-1 Security update for rxvt-unicode

This update for rxvt-unicode fixes the following issues: Update to 9.26 - eviouring.c was wrongly required during compilation, and wrongly not packaged. Update to 9.25 boo1186174 CVE-2021-33477 - for the 17.5th anniversary, and because many distributions seem to remove rxvt in favour of urxvt, th...

SUSE SLES12: libsystemd0 / libsystemd0-32bit / libudev-devel / libudev1 / etc (SUSE-SU-2022:4279-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:4279-1 advisory. - CVE-2022-3821: Fixed buffer overrun in formattimespan function bsc1204968. - Import commit 417bb0944e035969594fff83a3ab9c2ca9a56234...

SUSE: Security Advisory (SUSE-SU-2022:4279-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:4279-1 Security update for systemd

This update for systemd fixes the following issues: - CVE-2022-3821: Fixed buffer overrun in formattimespan function bsc1204968. - Import commit 417bb0944e035969594fff83a3ab9c2ca9a56234 20743c1a44 logind: fix crash in logind on user-specified message string b971b5f085 tmpfiles: check the director...

CVE-2022-45873

A flaw was found in the systemd-coredump utility of systemd. When an application crashes, the systemd-coredump utility is called twice, once by the kernel and the second time in the [email protected] to write the data, process, and save the core file. Communication between the programs is...

Denial Of Service (DoS)

libsystemd.so is vulnerable to denial of service. The vulnerability exists in parseelfobject function of elf-util.c due to a systemd-coredump deadlock which allows an attacker to cause an application crash by providing malicious input...

CVE-2022-45873

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parseelfobject in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested...

AZL-11523 CVE-2022-45873 affecting package systemd for versions less than 250.3-12

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parseelfobject in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested...

AZL-41470 CVE-2022-45873 affecting package systemd-bootstrap for versions less than 250.3-17

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parseelfobject in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested...

DEBIAN-CVE-2022-45873

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parseelfobject in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested...

CVE-2022-45873

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parseelfobject in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested...

Design/Logic Flaw

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parseelfobject in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested...