systemd/fuzz-varlink: Heap-buffer-overflow in varlink_enqueue_json

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5692571826782208 Project: systemd Fuzzer: libFuzzersystemdfuzz-varlink Fuzz target binary: fuzz-varlink Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

systemd/fuzz-varlink: Use-of-uninitialized-value in varlink_write

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5730863070838784 Project: systemd Fuzzer: libFuzzersystemdfuzz-varlink Fuzz target binary: fuzz-varlink Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash

It was discovered that systemd allocates a buffer large enough to store the path field of a dbus message without performing enough checks. A local attacker may trigger this flaw by sending a dbus message to systemd with a large path making systemd crash or possibly elevating his privileges...

Moderate: Red Hat Security Advisory: systemd security and bug fix update

An update for systemd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: container-tools:rhel8 security and bug fix update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RLSA-2019:0975 Important: container-tools:rhel8 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: A flaw was found in the way runc handled system file descriptors when running containers. A malicious container could use this flaw to overwrite contents of the runc...

ALSA-2019:0975 Important: container-tools:rhel8 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: A flaw was found in the way runc handled system file descriptors when running containers. A malicious container could use this flaw to overwrite contents of the runc...

(Vulnerability) The vulnerability of the binary system for storing service information via systemd-journald arises from operations that go beyond the buffer in memory. This allows an attacker to trigger a service failure or execute code with journald privileges.

The vulnerabilities of the binary system for storing service information, systemd-journald and systemd-journal-remote, are due to operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow an attacker to cause a service failure or execute code with...

RHEL 8 : systemd (RHSA-2019:0990)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0990 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive...

Fedora Update for systemd FEDORA-2018-c402eea18b

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for systemd FEDORA-2019-18b3a10c7f

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for systemd FEDORA-2019-1fb1547321

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

(Vulnerability) The vulnerability of the binary system for storing service information via systemd-journald, caused by operations that go beyond the buffer in memory, allows attackers to escalate their privileges or cause service failures.

The vulnerability of the systemd-journald binary storage system of service information arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure...

Fedora Update for systemd FEDORA-2019-8434288a24

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EulerOS 2.0 SP2 : systemd (EulerOS-SA-2019-1344)

According to the version of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - systemd: Spoofing of XDGSEAT allows for actions to be checked against 'allowactive' instead of 'allowany'.CVE-2019-3842 Note that Tenable Network...

EulerOS 2.0 SP3 : systemd (EulerOS-SA-2019-1345)

According to the version of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864.CVE-2019-3815 Note that Tenable Network Security has extracted the...

Fedora 30 : 1:grub2 / systemd (2019-616045ca76)

In systemd: backport of bunch of patches from the v242 release. Most important : - kernel-install will not create the boot loader entry automatically - a memory leak is fixed. In grub2 : - 10linuxbls: don't add --users option to generated menu entries 1693515 - Only set blsdir if...

Fedora 30 : systemd (2019-7322053e74)

Fix hang in flushaccept 1702358 - Fix handling of RUN keys in udevd - Some documentation and minor logging fixes - Backport the addition of RestrictSUIDSGID= from systemd-242 and enable RestrictSUIDSGID=yes for systemd services which use DynamicUser=yes 1703356, CVE-2019-3843. The defaults in...

Fedora 30 : systemd (2019-3fa5db9e19)

Backport more patches : - shared/install: Preserve escape characters for escaped unit names https://github.com/coreos/bugs/issues/2569 - timedate: fix emitted value when ntp client is enabled/disabled 1696586 - udev: run programs in the specified order 1696784 - core: add...

EulerOS 2.0 SP3 : NetworkManager (EulerOS-SA-2019-1322)

According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Out-of-bounds heap write in systemd-networkd dhcpv6 option handling CVE-2018-15688 Note that Tenable Network Security has extracted the...