4107 matches found
CVE-2020-1712
CVE-2020-1712 affects systemd; a heap use-after-free occurs when asynchronous Polkit queries are performed while handling dbus messages. Local unprivileged attackers can crash systemd services or potentially execute code to elevate privileges by sending crafted dbus messages. Public details acros...
openSUSE Security Update : cni / cni-plugins / conmon / etc (openSUSE-2020-398)
This update for cni, cni-plugins, conmon, fuse-overlayfs, podman fixes the following issues : podman was updated to 1.8.0 : - CVE-2019-18466: Fixed a bug where podman cp would improperly copy files on the host when copying a symlink in the container that included a glob operator 3829 bsc1155217 -...
openSUSE Security Update : nghttp2 (openSUSE-2020-379)
This update for nghttp2 fixes the following issues : nghttp2 was update to version 1.40.0 bsc1166481 - lib: Add nghttp2checkauthority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of stati...
F5 Networks BIG-IP : systemd vulnerabilities (K06044762)
CVE-2018-16864 An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his...
SUSE-RU-2020:0793-1 Recommended update for systemd
This update for systemd fixes the following issues: - manager: fix job mode when signalled to shutdown etc bsc1161262 - remove fallback for user/exit.target - dbus method Manager.Exit does not start exit.target - do not install rescue.target for alt-↑ - %j/%J unit specifiers Added support for I/O...
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2020-1301)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : systemd (EulerOS-SA-2020-1301)
According to the version of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A heap use-after-free vulnerability was found in systemd, where asynchronous Polkit queries are performed while handling dbus messages. A local...
SUSE-SU-2020:0722-1 Security update for nghttp2
This update for nghttp2 fixes the following issues: nghttp2 was update to version 1.40.0 bsc1166481 - lib: Add nghttp2checkauthority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of static...
SUSE-SU-2020:0331-1 Security update for systemd
This update for systemd fixes the following issues: - CVE-2020-1712 bscbsc1162108 Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or potential...
SUSE SLES15 Security Update : cni, cni-plugins, conmon, fuse-overlayfs, podman (SUSE-SU-2020:0697-1)
This update for cni, cni-plugins, conmon, fuse-overlayfs, podman fixes the following issues : podman was updated to 1.8.0 : CVE-2019-18466: Fixed a bug where podman cp would improperly copy files on the host when copying a symlink in the container that included a glob operator 3829 bsc1155217 The...
GLSA-202003-20 : systemd: Heap use-after-free
The remote host is affected by the vulnerability described in GLSA-202003-20 systemd: Heap use-after-free It was found that systemd incorrectly handled certain Polkit queries. Impact : A local unprivileged user, by sending a specially crafted Polkit query, could possibly execute arbitrary code wi...
systemd: Heap use-after-free
Background A system and service manager. Description It was found that systemd incorrectly handled certain Polkit queries. Impact A local unprivileged user, by sending a specially crafted Polkit query, could possibly execute arbitrary code with the privileges of the process, escalate privileges o...
CVE-2018-16865
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash...
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2020-1216)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization for ARM 64 3.0.2.0 : systemd (EulerOS-SA-2020-1216)
According to the versions of the systemd packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. Wh...
systemd Denial of Service Vulnerability (CNVD-2020-19551)
systemd is a Linux-based system and service manager from the German software developers Lennart Poettering. The product is compatible with SysV and LSB startup scripts and provides a framework for representing dependencies between system services. A denial of service vulnerability exists in...
CVE-2012-1101
systemd 37-1 does not properly handle non-existent services, which causes a denial of service failure of login procedure...
CVE-2012-1101
systemd 37-1 does not properly handle non-existent services, which causes a denial of service failure of login procedure...
