MGASA-2014-0188
Updated systemd packages fix a buffer overflow
A stack-based buffer overflow was found in systemd-ask-password, a utility used to query a system password or passphrase from the user, using a question message specified on the command line. A local user could this flaw to crash the binary or even execute arbitrary code with the permissions of the user running the program.
The systemd packages shipped with Mageia 3 and 4 have been updated to address this vulnerability.
Additionally, the Mageia 4 packages include various other general stability and performance fixed deemed appropriate for the stable updates.
What each source reports
OSV No score
Updated systemd packages fix a buffer overflow
A stack-based buffer overflow was found in systemd-ask-password, a utility used to query a system password or passphrase from the user, using a question message specified on the command line. A local user could this flaw to crash the binary or even execute arbitrary code with the permissions of the user running the program.
The systemd packages shipped with Mageia 3 and 4 have been updated to address this vulnerability.
Additionally, the Mageia 4 packages include various other general stability and performance fixed deemed appropriate for the stable updates.
- Record
MGASA-2014-0188- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2014-0188 is a vulnerability with no CVSS score yet in systemd, published April 23, 2014. No source lists public exploit code. Fixed in systemd 195-22.2.mga3.