GLSA-202003-20 : systemd: Heap use-after-free

The remote host is affected by the vulnerability described in GLSA-202003-20 systemd: Heap use-after-free It was found that systemd incorrectly handled certain Polkit queries. Impact : A local unprivileged user, by sending a specially crafted Polkit query, could possibly execute arbitrary code wi...

systemd: Heap use-after-free

Background A system and service manager. Description It was found that systemd incorrectly handled certain Polkit queries. Impact A local unprivileged user, by sending a specially crafted Polkit query, could possibly execute arbitrary code with the privileges of the process, escalate privileges o...

CVE-2018-16865

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash...

Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2020-1216)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : systemd (EulerOS-SA-2020-1216)

According to the versions of the systemd packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. Wh...

systemd Denial of Service Vulnerability (CNVD-2020-19551)

systemd is a Linux-based system and service manager from the German software developers Lennart Poettering. The product is compatible with SysV and LSB startup scripts and provides a framework for representing dependencies between system services. A denial of service vulnerability exists in...

CVE-2012-1101

systemd 37-1 does not properly handle non-existent services, which causes a denial of service failure of login procedure...

CVE-2012-1101

systemd 37-1 does not properly handle non-existent services, which causes a denial of service failure of login procedure...

DEBIAN-CVE-2012-1101

systemd 37-1 does not properly handle non-existent services, which causes a denial of service failure of login procedure...

Design/Logic Flaw

systemd 37-1 does not properly handle non-existent services, which causes a denial of service failure of login procedure...

CVE-2012-1101

systemd 37-1 does not properly handle non-existent services, which causes a denial of service failure of login procedure...

CVE-2012-1101

CVE-2012-1101 affects systemd 37-1. The issue occurs when non-existent services are not handled properly, resulting in a denial of service during login. The impact described is a failure of the login procedure with an availability impact. The connected documents provide this same description and ...

CVE-2012-1101

systemd 37-1 does not properly handle non-existent services, which causes a denial of service failure of login procedure...

systemd:fuzz-journal-remote: Use-of-uninitialized-value in strjoin_real

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=5730988035670016 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-journal-remote Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

openSUSE Security Update : mariadb (openSUSE-2020-289)

This update for mariadb fixes the following issues : MariaDB was updated to version 10.2.31 GA bsc1162388. Security issues fixed : - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. - CVE-2019-18901: Fixed an unsafe path handling...

openSUSE: Security Advisory for mariadb (openSUSE-SU-2020:0289-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for mariadb (moderate)

openSUSE Security Update: Security update for mariadb Announcement ID: openSUSE-SU-2020:0289-1 Rating: moderate References: 1160878 1160883 1160895 1160912 1162388 Cross-References: CVE-2019-18901 CVE-2020-2574 Affected Products: openSUSE Leap 15.1 An update that solves two vulnerabilities and ha...

OPENSUSE-SU-2020:0289-1 Security update for mariadb

This update for mariadb fixes the following issues: MariaDB was updated to version 10.2.31 GA bsc1162388. Security issues fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. - CVE-2019-18901: Fixed an unsafe path handling...

CVE-2019-18901

A UNIX Symbolic Link Symlink Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Serv...

CVE-2019-18901 mysql-systemd-helper allows setting 640 permissions of arbitrary files

A UNIX Symbolic Link Symlink Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Serv...