SY
Product
Systemd
55
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 17Medium 26Low 3
Watch
Add Systemd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-15688 | 8.8 | Oct 26 | A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd Affected: through 239 |
| CVE-2023-26604 | 7.8 | Mar 3 | systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be… Affected: before 246.7 |
| CVE-2020-1712 | 7.8 | Mar 31 | A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages Affected: through 244 |
| CVE-2019-3844 | 7.8 | Apr 26 | It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned… Affected: before 242 |
| CVE-2019-3843 | 7.8 | Apr 26 | It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the… Affected: before 242 |
| CVE-2018-16865 | 7.8 | Jan 11 | An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the… Affected: through 240 |
| CVE-2018-16864 | 7.8 | Jan 11 | An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command… Affected: through 240 |
| CVE-2018-15686 | 7.8 | Oct 26 | A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess Affected: through 239 |
| CVE-2018-6954 | 7.8 | Feb 13 | systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors… Affected: through 237 |
| CVE-2017-18078 | 7.8 | Jan 29 | systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protected_hardlinks sysctl is turned off, which allows… Affected: before 237 |
| CVE-2016-10156 | 7.8 | Jan 23 | A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their… Affected: 228 |
| CVE-2017-15908 | 7.5 | Oct 26 | In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window()… Affected: 223; 224; 225; 226; 227; 228; +7 more |
| CVE-2017-9445 | 7.5 | Jun 28 | In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small Affected: 223 through 233 |
| CVE-2017-9217 | 7.5 | May 24 | systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section Affected: through 233 |
| CVE-2026-40224 | 7.3 | Apr 10 | In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace Affected: 259 before 259.3 |
| CVE-2019-3842 | 7.0 | Apr 9 | In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable Affected: through 241; 242; 242; 242 |
| CVE-2018-15687 | 7.0 | Oct 26 | A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files Affected: 235 before 240 |
Showing 17