Поиск уязвимостей
Количество 49
Количество 49
SUSE-SU-2019:0054-1
Security update for systemd
SUSE-SU-2019:0053-1
Security update for systemd
CVE-2019-6454
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVE-2019-6454
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVE-2019-6454
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
CVE-2019-6454
CVE-2019-6454
An issue was discovered in sd-bus in systemd 239. bus_process_object() ...
GHSA-jr8q-jw7m-4m3m
An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.
BDU:2019-00414
Уязвимость в бинарной системе хранения служебной информации systemd-journald операционной системы Debian, позволяющая нарушителю получить доступ к конфиденциальным данным
openSUSE-SU-2019:0268-1
Security update for systemd
openSUSE-SU-2019:0255-1
Security update for systemd
SUSE-SU-2019:0428-1
Security update for systemd
SUSE-SU-2019:0426-1
Security update for systemd
SUSE-SU-2019:0425-2
Security update for systemd
SUSE-SU-2019:0425-1
Security update for systemd
SUSE-SU-2019:0424-1
Security update for systemd
GHSA-8h89-jj6w-g26p
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
ELSA-2019-0990
ELSA-2019-0990: systemd security and bug fix update (MODERATE)
ELSA-2019-0368
ELSA-2019-0368: systemd security update (IMPORTANT)
BDU:2019-01413
Уязвимость функции bus_process_object() подсистемы инициализации операционных систем Linux Systemd, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2019:0054-1 Security update for systemd | почти 8 лет назад | ||
| SUSE-SU-2019:0053-1 Security update for systemd | почти 8 лет назад | ||
 | CVE-2019-6454 An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). | CVSS3: 5.5 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-6454 An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). | CVSS3: 7 | 2% Низкий | больше 7 лет назад |
 | CVE-2019-6454 An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). | CVSS3: 5.5 | 2% Низкий | больше 7 лет назад |
 | CVSS3: 5.5 | 2% Низкий | около 6 лет назад | |
| CVE-2019-6454 An issue was discovered in sd-bus in systemd 239. bus_process_object() ... | CVSS3: 5.5 | 2% Низкий | больше 7 лет назад |
| GHSA-jr8q-jw7m-4m3m An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable. | CVSS3: 3.3 | 1% Низкий | больше 4 лет назад |
 | BDU:2019-00414 Уязвимость в бинарной системе хранения служебной информации systemd-journald операционной системы Debian, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 4.3 | 1% Низкий | почти 8 лет назад |
| openSUSE-SU-2019:0268-1 Security update for systemd | 2% Низкий | больше 7 лет назад | |
| openSUSE-SU-2019:0255-1 Security update for systemd | 2% Низкий | больше 7 лет назад | |
| SUSE-SU-2019:0428-1 Security update for systemd | 2% Низкий | больше 7 лет назад | |
| SUSE-SU-2019:0426-1 Security update for systemd | 2% Низкий | больше 7 лет назад | |
| SUSE-SU-2019:0425-2 Security update for systemd | 2% Низкий | больше 7 лет назад | |
| SUSE-SU-2019:0425-1 Security update for systemd | 2% Низкий | больше 7 лет назад | |
| SUSE-SU-2019:0424-1 Security update for systemd | 2% Низкий | больше 7 лет назад | |
| GHSA-8h89-jj6w-g26p An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). | CVSS3: 5.5 | 2% Низкий | больше 4 лет назад |
| ELSA-2019-0990 ELSA-2019-0990: systemd security and bug fix update (MODERATE) | 2% Низкий | больше 7 лет назад | |
| ELSA-2019-0368 ELSA-2019-0368: systemd security update (IMPORTANT) | 2% Низкий | больше 7 лет назад | |
| BDU:2019-01413 Уязвимость функции bus_process_object() подсистемы инициализации операционных систем Linux Systemd, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 2% Низкий | почти 8 лет назад |
Уязвимостей на страницу