Denial Of Service (DoS)

systemd is vulnerable to denial of service. An attacker is able to crash the application using an excessive size value involving strdupa and alloca for a pathname...

SUSE-SU-2021:2423-1 Security update for systemd

This update for systemd fixes the following issues: Security issues fixed: - CVE-2021-33910: Fixed a denial of service stack exhaustion in systemd PID 1 bsc1188063 Other fixes: - mount-util: shorten the loop a bit 7545 - mount-util: do not use the official MAXHANDLESZ 7523 - mount-util: tape over...

systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

A flaw was found in systemd. The use of alloca function with an uncontrolled size in function unitnamepathescape allows a local attacker, able to mount a filesystem on a very long path, to crash systemd and the whole system by allocating a very large space in the stack. The highest threat from th...

Important: Red Hat Security Advisory: systemd security update

An update for systemd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important Photon OS Security Update - PHSA-2021-0066

Updates of 'systemd', 'apache-tomcat' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0065

Updates of 'systemd', 'linux-aws', 'linux-secure', 'linux-rt', 'linux', 'linux-esx' packages of Photon OS have been released...

openSUSE 15 Security Update : systemd (openSUSE-SU-2021:2404-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:2404-1 advisory. - basic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a pathname...

SUSE SLED15: libsystemd0 / libsystemd0-32bit / libudev-devel / libudev1 / etc (SUSE-SU-2021:2410-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2410-1 advisory. - CVE-2021-33910: Fixed a denial of service stack exhaustion in systemd PID 1 bsc1188063 Tenable has extracted the preceding description block...

RHEL 8 : systemd (RHSA-2021:2721)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2721 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive...

SUSE SLED15: libsystemd0 / libsystemd0-32bit / libudev-devel / libudev1 / etc (SUSE-SU-2021:2404-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2404-1 advisory. - CVE-2021-33910: Fixed a denial of service in systemd via unitnamepathescape bsc1188063 - Skip udev rules if 'elevator=' is used bsc1184994...

CentOS 8 : systemd (CESA-2021:2717)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2717 advisory. - systemd: uncontrolled allocation on the stack in function unitnamepathescape leads to crash CVE-2021-33910 Note that Nessus has not tested for this issue but...

systemd security update

239-45.0.2 - Disable unprivileged BPF by default Orabug: 32870980 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev rules: fix memory hot add and remove Orabug: 31310273 - fix to enable systemd-pstore.service Orabug: 30951066 - journal: change support URL shown in the catalog...

SUSE: Security Advisory (SUSE-SU-2021:2404-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:2405-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4942-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for systemd (openSUSE-SU-2021:2404-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for systemd (openSUSE-SU-2021:2410-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 8 : systemd (RHSA-2021:2724)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2724 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive...

openSUSE 15 Security Update : systemd (openSUSE-SU-2021:2410-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2410-1 advisory. - basic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a pathname...

SUSE SLED12: libsystemd0 / libsystemd0-32bit / libudev-devel / libudev1 / etc (SUSE-SU-2021:2405-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2405-1 advisory. - CVE-2021-33910: Fixed a denial of service in systemd via unitnamepathescape bsc1188063 - Fixed a regression with hostnamectl and...