systemd: buffer overrun in format_timespan() function

An off-by-one error flaw was found in systemd in the formattimespan function of time-util.c. This flaw allows an attacker to supply specific values for time and accuracy, leading to a buffer overrun in formattimespan, leading to a denial of service...

EulerOS Virtualization 2.9.1 : systemd (EulerOS-SA-2023-1632)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific...

EulerOS 2.0 SP10 : systemd (EulerOS-SA-2023-1402)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for tim...

systemd: buffer overrun in format_timespan() function

An off-by-one error flaw was found in systemd in the formattimespan function of time-util.c. This flaw allows an attacker to supply specific values for time and accuracy, leading to a buffer overrun in formattimespan, leading to a denial of service...

systemd:fuzz-time-util: Use-of-uninitialized-value in rename_process

Project: https://github.com/systemd/systemd.git Detailed Report: https://oss-fuzz.com/testcase?key=5984982726475776 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-time-util Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

systemd security and bug fix update

239-68.0.2.1 - Backport upstream pstore dmesg fix Orabug: 34850699 - Standardize ioctl BTRFSIOCQGROUPCREATE check and return -ENOTCONN, if quota is not enabled Orabug: 34694253 - Disable unprivileged BPF by default Orabug: 32870980 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev...

systemd: buffer overrun in format_timespan() function

An off-by-one error flaw was found in systemd in the formattimespan function of time-util.c. This flaw allows an attacker to supply specific values for time and accuracy, leading to a buffer overrun in formattimespan, leading to a denial of service...

systemd:fuzz-time-util: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=5339469178077184 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-time-util Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull parsetimestamp...

systemd:fuzz-time-util: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=5397368558452736 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-time-util Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull parsetimestamp...

systemd:fuzz-time-util: Use-of-uninitialized-value in rename_process

Detailed Report: https://oss-fuzz.com/testcase?key=5347401462579200 Project: systemd Fuzzing Engine: libFuzzer Fuzz Target: fuzz-time-util Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: renameprocess safeforkfull parsetimestamp...

An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan() leading to a Denial of Service.

...

AZL-41659 CVE-2022-3821 affecting package systemd-bootstrap for versions less than 250.3-17

An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in formattimespan, leading to a Denial of Service...