CVE-2016-7795
The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause...
The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.
- Record
CVE-2016-7795- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.
- Record
CVE-2016-7795- Updated
- 2026-11-02
EUVDEUVD-2016-8645 No score
The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.
- Record
EUVD-2016-8645- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5cr-2q2m-4c59
The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause...
The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.
- Record
GHSA-r5cr-2q2m-4c59- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.
- Record
CVE-2016-7795- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-7795
The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.
- Record
DEBIAN-CVE-2016-7795- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVRHSA-2016:2610
Red Hat Security Advisory: systemd security and bug fix update
- Record
RHSA-2016:2610- CVSS 3.0
- 6.8 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2016:2694
Red Hat Security Advisory: systemd security and bug fix update
- Record
RHSA-2016:2694- CVSS 3.0
- 6.8 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-7795
The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.
- Record
UBUNTU-CVE-2016-7795- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2016-0380 No score
Updated systemd packages fix security vulnerability
Andrew Ayer discovered that Systemd improperly handled zero-length notification messages. A local unprivileged attacker could use this to cause a denial of service (init crash leading to system unavailability) (CVE-2016-7795).
- Record
MGASA-2016-0380- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
systemdDebian:12 |
before 231-9 | 231-9 |
systemdDebian:13 |
before 231-9 | 231-9 |
systemdDebian:14 |
before 231-9 | 231-9 |
systemdMageia:5 |
before 217-11.2.mga5 | 217-11.2.mga5 |
libgudev1Red Hat:enterprise_linux:7::client |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemdRed Hat:enterprise_linux:7::client |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-debuginfoRed Hat:enterprise_linux:7::client |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-libsRed Hat:enterprise_linux:7::client |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-pythonRed Hat:enterprise_linux:7::client |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-sysvRed Hat:enterprise_linux:7::client |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
Show 61 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libgudev1-develRed Hat:enterprise_linux:7::client |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-develRed Hat:enterprise_linux:7::client |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-journal-gatewayRed Hat:enterprise_linux:7::client |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-networkdRed Hat:enterprise_linux:7::client |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-resolvedRed Hat:enterprise_linux:7::client |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
libgudev1Red Hat:enterprise_linux:7::computenode |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemdRed Hat:enterprise_linux:7::computenode |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-libsRed Hat:enterprise_linux:7::computenode |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-pythonRed Hat:enterprise_linux:7::computenode |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-sysvRed Hat:enterprise_linux:7::computenode |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
libgudev1-develRed Hat:enterprise_linux:7::computenode |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-develRed Hat:enterprise_linux:7::computenode |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-journal-gatewayRed Hat:enterprise_linux:7::computenode |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-networkdRed Hat:enterprise_linux:7::computenode |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-resolvedRed Hat:enterprise_linux:7::computenode |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
libgudev1Red Hat:enterprise_linux:7::server |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
libgudev1-develRed Hat:enterprise_linux:7::server |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemdRed Hat:enterprise_linux:7::server |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-debuginfoRed Hat:enterprise_linux:7::server |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-develRed Hat:enterprise_linux:7::server |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-libsRed Hat:enterprise_linux:7::server |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-pythonRed Hat:enterprise_linux:7::server |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-sysvRed Hat:enterprise_linux:7::server |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-journal-gatewayRed Hat:enterprise_linux:7::server |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-networkdRed Hat:enterprise_linux:7::server |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-resolvedRed Hat:enterprise_linux:7::server |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
libgudev1Red Hat:enterprise_linux:7::workstation |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
libgudev1-develRed Hat:enterprise_linux:7::workstation |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemdRed Hat:enterprise_linux:7::workstation |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-develRed Hat:enterprise_linux:7::workstation |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-libsRed Hat:enterprise_linux:7::workstation |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-pythonRed Hat:enterprise_linux:7::workstation |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-sysvRed Hat:enterprise_linux:7::workstation |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-journal-gatewayRed Hat:enterprise_linux:7::workstation |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-networkdRed Hat:enterprise_linux:7::workstation |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
systemd-resolvedRed Hat:enterprise_linux:7::workstation |
before 0:219-30.el7_3.3 | 0:219-30.el7_3.3 |
libgudev1Red Hat:rhel_eus:7.2::computenode |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemdRed Hat:rhel_eus:7.2::computenode |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-debuginfoRed Hat:rhel_eus:7.2::computenode |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-libsRed Hat:rhel_eus:7.2::computenode |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-pythonRed Hat:rhel_eus:7.2::computenode |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-sysvRed Hat:rhel_eus:7.2::computenode |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
libgudev1-develRed Hat:rhel_eus:7.2::computenode |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-develRed Hat:rhel_eus:7.2::computenode |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-journal-gatewayRed Hat:rhel_eus:7.2::computenode |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-networkdRed Hat:rhel_eus:7.2::computenode |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-resolvedRed Hat:rhel_eus:7.2::computenode |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
libgudev1Red Hat:rhel_eus:7.2::server |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
libgudev1-develRed Hat:rhel_eus:7.2::server |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemdRed Hat:rhel_eus:7.2::server |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-debuginfoRed Hat:rhel_eus:7.2::server |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-develRed Hat:rhel_eus:7.2::server |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-libsRed Hat:rhel_eus:7.2::server |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-pythonRed Hat:rhel_eus:7.2::server |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-sysvRed Hat:rhel_eus:7.2::server |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-journal-gatewayRed Hat:rhel_eus:7.2::server |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-networkdRed Hat:rhel_eus:7.2::server |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemd-resolvedRed Hat:rhel_eus:7.2::server |
before 0:219-19.el7_2.18 | 0:219-19.el7_2.18 |
systemdUbuntu:16.04:LTS |
before 229-4ubuntu10, plus listed versions 225-1ubuntu9227-2ubuntu1227-2ubuntu2228-1ubuntu2228-2ubuntu1 Show 19 moreShow less228-2ubuntu2228-3ubuntu1228-4ubuntu1228-4ubuntu2228-5ubuntu1228-5ubuntu2228-5ubuntu3228-6ubuntu1229-1ubuntu2229-1ubuntu4229-2ubuntu1229-3ubuntu1229-3ubuntu2229-4ubuntu1229-4ubuntu4229-4ubuntu5229-4ubuntu6229-4ubuntu7229-4ubuntu8 |
229-4ubuntu10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-7795 is a medium vulnerability (CVSS 5.5) in Systemd Project Systemd, published October 13, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.63%, the 50th percentile. Fixed in systemd 231-9.
References
openwall.com/lists/oss-security/2016/09/30/1
securityfocus.com/bid/93223
rhn.redhat.com/errata/RHSA-2016-2610.html
agwa.name/blog/post/how_to_crash_systemd_in_one_tweet
ubuntu.com/usn/USN-3094-1
Show 24 moreShow less
github.com/systemd/systemd/issues/4234
securitytracker.com/id/1037320
nvd.nist.gov/vuln/detail/CVE-2016-7795
security-tracker.debian.org/tracker/CVE-2016-7795
advisories.mageia.org/MGASA-2016-0380.html
bugs.mageia.org/show_bug.cgi?id=19494
access.redhat.com/errata/RHSA-2016:2610
bugzilla.redhat.com/show_bug.cgi?id=1380286
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2610.json
cve.org/CVERecord?id=CVE-2016-7795
ubuntu.com/security/CVE-2016-7795