Fedora: Security Advisory for systemd (FEDORA-2022-6919a53ea9)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

systemd:fuzz-time-util: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=5558737643634688 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-time-util Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull parsetimestamp...

Fedora 35 : systemd (2022-8ac4104a02)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8ac4104a02 advisory. - Latest stable release various small fixes all over: 2085481, 2086166 - 2139355, CVE-2022-3821 No need to log out or reboot. Tenable has extracted the...

systemd:fuzz-network-parser: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=5791896251531264 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-network-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull...

CVE-2022-4415

A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suiddumpable kernel setting...

Important Photon OS Security Update - PHSA-2022-0304

Updates of 'systemd', 'curl' packages of Photon OS have been released...

PT-2022-7108 · Systemd +9 · Systemd +9

Name of the Vulnerable Software and Affected Versions: systemd versions 247 and later, with affected builds including those with libacl support Description: A security flaw in systemd-coredump can cause a local information leak due to not respecting the fs.suid dumpable kernel setting. This issue...

Systemd information leakage vulnerability

systemd is a Linux-based system and service manager from the individual developer Lennart Poettering in Germany. The product is compatible with SysV and LSB startup scripts and provides a framework for representing dependencies between system services. A security vulnerability exists in systemd,...

Important Photon OS Security Update - PHSA-2022-4.0-0304

Updates of 'curl', 'linux-aws', 'systemd', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

systemd:fuzz-time-util: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=5347401462579200 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-time-util Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull parsetimestamp...

Security Bulletin: Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities.

Summary Netcool Operations Insight v1.6.7 contains fixes for multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2022-26612 DESCRIPTION: Apache Hadoop for Windows could allow a remote attacker to bypass security restrictions, caused by the use of an...

Security Bulletin: systemd vulnerability may affect IBM Elastic Storage System (CVE-2021-4203)

Summary There is a vulnerability in systemd, used by IBM Elastic Storage System, which could allow a denial of service. Vulnerability Details CVEID:CVE-2022-2526 DESCRIPTION: systemd could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free flaw due to the...

Amazon Linux 2022 : systemd (ALAS2022-2022-219)

The version of systemd installed on the remote host is prior to 250.8-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-219 advisory. - A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when to...

CVE-2022-3821 affecting package systemd for versions less than 250.3-10

CVE-2022-3821 affecting package systemd for versions less than 250.3-10. A patched version of the package is available...

PT-2023-8454

Name of the Vulnerable Software and Affected Versions systemd-resolved affected versions not specified Description The issue is related to insufficient authentication checks of messages from DNS clients in the systemd-resolved service, which manages network connections and domain name resolutions...

Amazon Linux 2 : systemd (ALAS-2022-1899)

The version of systemd installed on the remote host is prior to 219-78. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1899 advisory. An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific...

CVE-2022-3821 affecting package systemd 239-42

CVE-2022-3821 affecting package systemd 239-42. A patched version of the package is available...

Medium: systemd

Issue Overview: An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in formattimespan, leading to a Denial of Service. CVE-2022-3821 Affected Packages: systemd...

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.

...

OPENSUSE-SU-2022:10222-1 Security update for rxvt-unicode

This update for rxvt-unicode fixes the following issues: Update to 9.26 - eviouring.c was wrongly required during compilation, and wrongly not packaged. Update to 9.25 boo1186174 CVE-2021-33477 - for the 17.5th anniversary, and because many distributions seem to remove rxvt in favour of urxvt, th...