3971 matches found
EulerOS Virtualization 2.5.4 : systemd (EulerOS-SA-2019-1216)
According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An out-of-bounds write flaw was found in the way systemd-resolved daemon handled processing of DNS responses. A remote attacker cou...
Debian DSA-4428-1 : systemd - security update
Jann Horn discovered that the PAM module in systemd insecurely uses the environment and lacks seat verification permitting spoofing an active session to PolicyKit. A remote attacker with SSH access can take advantage of this issue to gain PolicyKit privileges that are normally only granted to...
EulerOS Virtualization 2.5.3 : systemd (EulerOS-SA-2019-1195)
According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An out-of-bounds write flaw was found in the way systemd-resolved daemon handled processing of DNS responses. A remote attacker cou...
EulerOS Virtualization 2.5.4 : systemd (EulerOS-SA-2019-1217)
According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the way systemd handled empty notification messages. A local attacker could use this flaw to make systemd...
EulerOS Virtualization 2.5.4 : systemd (EulerOS-SA-2019-1196)
According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was discovered that systemd allocates a buffer large enough to store the path field of a dbus message without performing enough...
Debian: Security Advisory (DSA-4428-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3938-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4428-1] systemd security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4428-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 08, 2019 https://www.debian.org/security/faq -...
USN-3938-1 systemd vulnerability
Jann Horn discovered that pamsystemd created logind sessions using some parameters from the environment. A local attacker could exploit this in order to spoof the active session and gain additional PolicyKit privileges...
USN-3938-1: systemd vulnerability
Jann Horn discovered that pamsystemd created logind sessions using some parameters from the environment. A local attacker could exploit this in order to spoof the active session and gain additional PolicyKit privileges...
CVE-2019-3842
In systemd before v242-rc4, it was discovered that pamsystemd does not properly sanitize the environment before using the XDGSEAT variable. It is possible for an attacker, in some particular configurations, to set a XDGSEAT environment variable which allows for commands to be checked against polk...
UBUNTU-CVE-2019-3842
In systemd before v242-rc4, it was discovered that pamsystemd does not properly sanitize the environment before using the XDGSEAT variable. It is possible for an attacker, in some particular configurations, to set a XDGSEAT environment variable which allows for commands to be checked against polk...
DSA-4428-1 systemd - security update
Bulletin has no description...
EulerOS Virtualization 2.5.4 : systemd (EulerOS-SA-2019-1233)
According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in...
EulerOS Virtualization 2.5.4 : systemd (EulerOS-SA-2019-1242)
According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in...
EulerOS Virtualization 2.5.3 : systemd (EulerOS-SA-2019-1256)
According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was discovered that systemd allocates a buffer large enough to store the path field of a dbus message without performing enough...
EulerOS 2.0 SP2 : NetworkManager (EulerOS-SA-2019-1119)
According to the version of the NetworkManager packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling CVE-2018-15688 Note that Tenable Network Security has extracte...
EulerOS 2.0 SP2 : systemd (EulerOS-SA-2019-1128)
According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864 CVE-2019-3815 - systemd: Insufficient input validation in...
EulerOS 2.0 SP5 : systemd (EulerOS-SA-2019-1153)
According to the version of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - systemd: Insufficient input validation in busprocessobject resulting in PID 1 crash CVE-2019-6454 Note that Tenable Network Security has extracted...
[SECURITY] Fedora 30 Update: systemd-241-4.gitcbf14c9.fc30
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...