Количество 20
Количество 20
GHSA-8h89-jj6w-g26p
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVE-2019-6454
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVE-2019-6454
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVE-2019-6454
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVE-2019-6454
CVE-2019-6454
An issue was discovered in sd-bus in systemd 239. bus_process_object() ...
openSUSE-SU-2019:0268-1
Security update for systemd
openSUSE-SU-2019:0255-1
Security update for systemd
SUSE-SU-2019:0428-1
Security update for systemd
SUSE-SU-2019:0426-1
Security update for systemd
SUSE-SU-2019:0425-2
Security update for systemd
SUSE-SU-2019:0425-1
Security update for systemd
SUSE-SU-2019:0424-1
Security update for systemd
ELSA-2019-0990
ELSA-2019-0990: systemd security and bug fix update (MODERATE)
ELSA-2019-0368
ELSA-2019-0368: systemd security update (IMPORTANT)
BDU:2019-01413
Уязвимость функции bus_process_object() подсистемы инициализации операционных систем Linux Systemd, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2019:1450-1
Security update for systemd
SUSE-SU-2019:1265-1
Security update for systemd
SUSE-SU-2019:1364-2
Security update for systemd
SUSE-SU-2019:1364-1
Security update for systemd
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-8h89-jj6w-g26p An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). | CVSS3: 5.5 | 0% Низкий | больше 3 лет назад |
 | CVE-2019-6454 An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
 | CVE-2019-6454 An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). | CVSS3: 7 | 0% Низкий | больше 6 лет назад |
 | CVE-2019-6454 An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
 | CVSS3: 5.5 | 0% Низкий | около 5 лет назад | |
| CVE-2019-6454 An issue was discovered in sd-bus in systemd 239. bus_process_object() ... | CVSS3: 5.5 | 0% Низкий | больше 6 лет назад |
 | openSUSE-SU-2019:0268-1 Security update for systemd | 0% Низкий | больше 6 лет назад | |
| openSUSE-SU-2019:0255-1 Security update for systemd | 0% Низкий | больше 6 лет назад | |
| SUSE-SU-2019:0428-1 Security update for systemd | 0% Низкий | больше 6 лет назад | |
| SUSE-SU-2019:0426-1 Security update for systemd | 0% Низкий | больше 6 лет назад | |
| SUSE-SU-2019:0425-2 Security update for systemd | 0% Низкий | больше 6 лет назад | |
| SUSE-SU-2019:0425-1 Security update for systemd | 0% Низкий | больше 6 лет назад | |
| SUSE-SU-2019:0424-1 Security update for systemd | 0% Низкий | больше 6 лет назад | |
| ELSA-2019-0990 ELSA-2019-0990: systemd security and bug fix update (MODERATE) | больше 6 лет назад | ||
| ELSA-2019-0368 ELSA-2019-0368: systemd security update (IMPORTANT) | больше 6 лет назад | ||
 | BDU:2019-01413 Уязвимость функции bus_process_object() подсистемы инициализации операционных систем Linux Systemd, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 0% Низкий | почти 7 лет назад |
| openSUSE-SU-2019:1450-1 Security update for systemd | больше 6 лет назад | ||
| SUSE-SU-2019:1265-1 Security update for systemd | больше 6 лет назад | ||
| SUSE-SU-2019:1364-2 Security update for systemd | больше 6 лет назад | ||
| SUSE-SU-2019:1364-1 Security update for systemd | больше 6 лет назад |
Уязвимостей на страницу