systemd:fuzz-resource-record: Crash in page_size

Detailed Report: https://oss-fuzz.com/testcase?key=5837677802160128 Project: systemd Fuzzing Engine: centipede Fuzz Target: fuzz-resource-record Job Type: centipedeasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1d97289043cd Crash State: pagesize dnspacketnew...

systemd:fuzz-journal-remote: Crash in _hashmap_free

Detailed Report: https://oss-fuzz.com/testcase?key=5716296456339456 Project: systemd Fuzzing Engine: centipede Fuzz Target: fuzz-journal-remote Job Type: centipedeasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1c9e49530d5a Crash State: hashmapfree...

systemd:fuzz-journald-audit: Crash in sd_event_default

Detailed Report: https://oss-fuzz.com/testcase?key=4749271416307712 Project: systemd Fuzzing Engine: centipede Fuzz Target: fuzz-journald-audit Job Type: centipedeasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1d57de1eb1fc Crash State: sdeventdefault dummyserverinit...

systemd:fuzz-lldp-rx: Crash in sd_event_new

Detailed Report: https://oss-fuzz.com/testcase?key=4616467550437376 Project: systemd Fuzzing Engine: centipede Fuzz Target: fuzz-lldp-rx Job Type: centipedeasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f9551162f71 Crash State: sdeventnew fuzz-lldp-rx.c...

systemd:fuzz-journal-remote: Crash in log_set_max_level

Detailed Report: https://oss-fuzz.com/testcase?key=4601988397793280 Project: systemd Fuzzing Engine: centipede Fuzz Target: fuzz-journal-remote Job Type: centipedeasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x1dbd8d0ab0f1 Crash State: logsetmaxlevel fuzz-journal-remote....

NewStart CGSL CORE 5.04 / MAIN 5.04 : systemd Vulnerability (NS-SA-2023-0030)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has systemd packages installed that are affected by a vulnerability: - An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accurac...

RLSA-2023:0954 Moderate: systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...

systemd security update

An update is available for systemd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The systemd packages contain systemd, a system and service manager for Linux,...

RLSA-2023:1572 Important: pesign security update

The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools. Security Fixes: pesign: Local privilege escalation on pesign systemd service CVE-2022-3560 For more details about the security issues, including the impact, a CVSS score, acknowledgments, a...

SUSE SLES12: libsystemd0 / libsystemd0-32bit / libudev-devel / libudev1 / etc (SUSE-SU-2023:1776-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1776-1 advisory. - CVE-2023-26604: Fixed a privilege escalation via the less pager. bsc1208958 - CVE-2022-4415: Fixed systemd-coredump that did not...

Rocky Linux 9 : systemd (RLSA-2023:0954)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0954 advisory. - A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suiddumpable...

Rocky Linux 8 : pesign (RLSA-2023:1572)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:1572 advisory. - A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for...

SUSE: Security Advisory (SUSE-SU-2023:1776-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : systemd (ALAS-2023-2004)

The version of systemd installed on the remote host is prior to 219-78. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2004 advisory. systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files ...

pesign: Local privilege escalation on pesign systemd service

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for...

Important: Red Hat Security Advisory: pesign security update

An update for pesign is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

pesign: Local privilege escalation on pesign systemd service

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for...

Important: systemd

Issue Overview: systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched...

ALSA-2023:1572 Important: pesign security update

The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools. Security Fixes: pesign: Local privilege escalation on pesign systemd service CVE-2022-3560 For more details about the security issues, including the impact, a CVSS score, acknowledgments, a...

Important: pesign security update

The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools. Security Fixes: pesign: Local privilege escalation on pesign systemd service CVE-2022-3560 For more details about the security issues, including the impact, a CVSS score, acknowledgments, a...