Login Request a demo
SP
Vendor
Systemd Project
1 product with CVEs on record
55
CVEs
0
On KEV
0
New 30D
Products
SY
Systemd
Systemd Project
9.8
55 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-40228
SY
Systemd
Systemd Project
3.3
0%
Apr 10In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set
CVE-2026-40227
SY
Systemd
Systemd Project
5.5
0%
Apr 10In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element
CVE-2026-40226
SY
Systemd
Systemd Project
6.4
0%
Apr 10In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file
CVE-2026-40225
SY
Systemd
Systemd Project
6.4
0%
Apr 10In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output
CVE-2026-40224
SY
Systemd
Systemd Project
7.3
0%
Apr 10In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace
CVE-2026-40223
SY
Systemd
Systemd Project
5.5
0%
Apr 10In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running
CVE-2026-29111
SY
Systemd
Systemd Project
5.5
0%
Mar 23systemd: Local unprivileged user can trigger an assert
CVE-2025-4598
SY
Systemd
Systemd Project
4.7
1%
May 30Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
CVE-2023-7008
SY
Systemd
Systemd Project
5.9
1%
Dec 23Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes
CVE-2023-31439
SY
Systemd
Systemd Project
5.3
0%
Jun 13An issue was discovered in systemd 253
CVE-2023-31438
SY
Systemd
Systemd Project
5.3
0%
Jun 13An issue was discovered in systemd 253
CVE-2023-31437
SY
Systemd
Systemd Project
5.3
0%
Jun 13An issue was discovered in systemd 253
CVE-2023-26604
SY
Systemd
Systemd Project
7.8
1%
Mar 3systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be…
CVE-2022-4415
SY
Systemd
Systemd Project
5.5
1%
Jan 11A vulnerability was found in systemd
CVE-2022-45873
SY
Systemd
Systemd Project
5.5
0%
Nov 23systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace
CVE-2022-3821
SY
Systemd
Systemd Project
5.5
0%
Nov 8An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c
CVE-2022-2526
SY
Systemd
Systemd Project
9.8
1%
Sep 9A use-after-free vulnerability was found in systemd
CVE-2021-3997
SY
Systemd
Systemd Project
5.5
2%
Aug 23A flaw was found in systemd
CVE-2021-33910
SY
Systemd
Systemd Project
5.5
9%
Jul 20basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled…
CVE-2020-13529
SY
Systemd
Systemd Project
6.1
1%
May 10An exploitable denial-of-service vulnerability exists in Systemd 245
CVE-2020-13776
SY
Systemd
Systemd Project
6.7
0%
Jun 3systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges…
CVE-2020-1712
SY
Systemd
Systemd Project
7.8
0%
Mar 31A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages
CVE-2012-1101
SY
Systemd
Systemd Project
5.5
0%
Mar 11systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure)
CVE-2019-20386
SY
Systemd
Systemd Project
2.4
0%
Jan 21An issue was discovered in button_open in login/logind-button.c in systemd before 243
CVE-2018-21029
SY
Systemd
Systemd Project
9.8
3%
Oct 30systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS
CVE-2019-15718
SY
Systemd
Systemd Project
4.4
1%
Sep 4In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted,…
CVE-2018-20839
SY
Systemd
Systemd Project
4.3
2%
May 17systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and…
CVE-2019-3844
SY
Systemd
Systemd Project
7.8
1%
Apr 26It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned…
CVE-2019-3843
SY
Systemd
Systemd Project
7.8
1%
Apr 26It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the…
CVE-2019-3842
SY
Systemd
Systemd Project
7.0
1%
Apr 9In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable
CVE-2019-6454
SY
Systemd
Systemd Project
5.5
2%
Mar 17An issue was discovered in sd-bus in systemd 239
CVE-2018-16888
SY
Systemd
Systemd Project
4.7
0%
Jan 14It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes
CVE-2018-16865
SY
Systemd
Systemd Project
7.8
3%
Jan 11An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the…
CVE-2018-16864
SY
Systemd
Systemd Project
7.8
1%
Jan 11An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command…
CVE-2018-16866
SY
Systemd
Systemd Project
3.3
1%
Jan 11An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'
CVE-2018-15688
SY
Systemd
Systemd Project
8.8
2%
Oct 26A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd
CVE-2018-15687
SY
Systemd
Systemd Project
7.0
1%
Oct 26A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files
CVE-2018-15686
SY
Systemd
Systemd Project
7.8
2%
Oct 26A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess
CVE-2018-1049
SY
Systemd
Systemd Project
5.9
7%
Feb 16In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel…
CVE-2018-6954
SY
Systemd
Systemd Project
7.8
1%
Feb 13systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors…
CVE-2017-18078
SY
Systemd
Systemd Project
7.8
1%
Jan 29systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protected_hardlinks sysctl is turned off, which allows…
CVE-2017-15908
SY
Systemd
Systemd Project
7.5
24%
Oct 26In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window()…
CVE-2015-7510
SY
Systemd
Systemd Project
9.8
4%
Sep 25Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd
CVE-2017-1000082
SY
Systemd
Systemd Project
9.8
4%
Jul 7systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g
CVE-2017-9445
SY
Systemd
Systemd Project
7.5
55%
Jun 28In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small
CVE-2017-9217
SY
Systemd
Systemd Project
7.5
15%
May 24systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section
CVE-2016-10156
SY
Systemd
Systemd Project
7.8
1%
Jan 23A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their…
CVE-2016-7796
SY
Systemd
Systemd Project
5.5
1%
Oct 13The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which…
CVE-2016-7795
SY
Systemd
Systemd Project
5.5
1%
Oct 13The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message…
CVE-2012-0871
SY
Systemd
Systemd Project
–
0%
Apr 18The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via…
CVE-2013-4394
SY
Systemd
Systemd Project
–
0%
Oct 28The SetX11Keyboard function in systemd, when PolicyKit Local Authority (PKLA) is used to change the group permissions on the X Keyboard Extension (XKB) layouts description, allows…
CVE-2013-4393
SY
Systemd
Systemd Project
–
0%
Oct 28journald in systemd, when the origin of native messages is set to file, allows local users to cause a denial of service (logging service blocking) via a crafted file descriptor
CVE-2013-4392
SY
Systemd
Systemd Project
5.0
0%
Oct 28systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files
CVE-2013-4391
SY
Systemd
Systemd Project
–
5%
Oct 28Integer overflow in the valid_user_field function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service (crash) and possibly execute…
CVE-2013-4327
SY
Systemd
Systemd Project
–
0%
Oct 3systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess…