{"id":"CVE-2019-20386","aliases":["DEBIAN-CVE-2019-20386","EUVD-2019-10938","GHSA-v2g8-4fgq-7rhx","MGASA-2020-0094","RHSA-2020:4007","RHSA-2020:4553","SUSE-SU-2020:0335-1","SUSE-SU-2020:1828-1","SUSE-SU-2020:1842-1","UBUNTU-CVE-2019-20386","USN-4269-1","openSUSE-SU-2020:0208-1","openSUSE-SU-2024:11420-1"],"status":"published","title":"An issue was discovered in button_open in login/logind-button.c in systemd before 243. When...","description":"An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.","severity":{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00425,"percentile":0.37098,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401","CWE-772"],"published":"2020-01-21T05:12:30Z","modified":"2026-10-24T14:07:05Z","fixes":[{"ecosystem":"Debian:12","package":"systemd","fixed_in":["243-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"systemd","fixed_in":["243-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"systemd","fixed_in":["243-5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libgudev1","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-debuginfo","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-libs","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-python","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-sysv","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"libgudev1-devel","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-devel","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-journal-gateway","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-networkd","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-resolved","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libgudev1","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-debuginfo","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-libs","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-python","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-sysv","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libgudev1-devel","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-devel","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-journal-gateway","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-networkd","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-resolved","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libgudev1","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"libgudev1-devel","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-debuginfo","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-devel","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-libs","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-python","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-sysv","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-journal-gateway","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-networkd","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-resolved","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libgudev1","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libgudev1-devel","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-debuginfo","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-devel","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-libs","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-python","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-sysv","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-journal-gateway","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-networkd","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-resolved","fixed_in":["0:219-78.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container-debuginfo","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debuginfo","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debugsource","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-devel","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote-debuginfo","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs-debuginfo","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam-debuginfo","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests-debuginfo","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev-debuginfo","fixed_in":["0:239-40.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"systemd","fixed_in":["228-157.12.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"systemd","fixed_in":["228-157.12.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"systemd","fixed_in":["228-157.12.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"systemd","fixed_in":["228-150.86.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"systemd","fixed_in":["228-150.86.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"systemd","fixed_in":["228-150.86.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"systemd","fixed_in":["229-4ubuntu21.27"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"systemd","fixed_in":["237-3ubuntu10.38"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"243-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"243-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"243-5"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-8.5.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-40.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"234-24.39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"234-24.39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"234-24.39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"234-24.39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"234-24.39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"234-24.39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.12.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.12.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.12.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.86.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.86.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.86.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["204-0ubuntu18","204-0ubuntu19","204-5ubuntu3","204-5ubuntu5","204-5ubuntu6","204-5ubuntu7","204-5ubuntu8","204-5ubuntu9","204-5ubuntu10","204-5ubuntu11","204-5ubuntu13","204-5ubuntu14","204-5ubuntu15","204-5ubuntu16","204-5ubuntu17","204-5ubuntu18","204-5ubuntu19","204-5ubuntu20","204-5ubuntu20.2","204-5ubuntu20.3","204-5ubuntu20.4","204-5ubuntu20.5","204-5ubuntu20.6","204-5ubuntu20.7","204-5ubuntu20.8","204-5ubuntu20.9","204-5ubuntu20.10","204-5ubuntu20.11","204-5ubuntu20.12","204-5ubuntu20.13","204-5ubuntu20.14","204-5ubuntu20.15","204-5ubuntu20.18","204-5ubuntu20.19","204-5ubuntu20.20","204-5ubuntu20.21","204-5ubuntu20.22","204-5ubuntu20.24","204-5ubuntu20.25","204-5ubuntu20.26","204-5ubuntu20.28","204-5ubuntu20.29","204-5ubuntu20.31","204-5ubuntu20.31+esm2","204-5ubuntu20.31+esm3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.27"}]}],"versions":["225-1ubuntu9","227-2ubuntu1","227-2ubuntu2","228-1ubuntu2","228-2ubuntu1","228-2ubuntu2","228-3ubuntu1","228-4ubuntu1","228-4ubuntu2","228-5ubuntu1","228-5ubuntu2","228-5ubuntu3","228-6ubuntu1","229-1ubuntu2","229-1ubuntu4","229-2ubuntu1","229-3ubuntu1","229-3ubuntu2","229-4ubuntu1","229-4ubuntu4","229-4ubuntu5","229-4ubuntu6","229-4ubuntu7","229-4ubuntu8","229-4ubuntu10","229-4ubuntu11","229-4ubuntu12","229-4ubuntu13","229-4ubuntu16","229-4ubuntu17","229-4ubuntu19","229-4ubuntu20","229-4ubuntu21","229-4ubuntu21.1","229-4ubuntu21.2","229-4ubuntu21.3","229-4ubuntu21.4","229-4ubuntu21.5","229-4ubuntu21.6","229-4ubuntu21.8","229-4ubuntu21.9","229-4ubuntu21.10","229-4ubuntu21.15","229-4ubuntu21.16","229-4ubuntu21.17","229-4ubuntu21.19","229-4ubuntu21.21","229-4ubuntu21.22","229-4ubuntu21.23"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.38"}]}],"versions":["234-2ubuntu12","235-2ubuntu3","235-3ubuntu2","235-3ubuntu3","237-3ubuntu3","237-3ubuntu4","237-3ubuntu6","237-3ubuntu7","237-3ubuntu8","237-3ubuntu10","237-3ubuntu10.2","237-3ubuntu10.3","237-3ubuntu10.4","237-3ubuntu10.6","237-3ubuntu10.9","237-3ubuntu10.11","237-3ubuntu10.12","237-3ubuntu10.13","237-3ubuntu10.15","237-3ubuntu10.17","237-3ubuntu10.19","237-3ubuntu10.20","237-3ubuntu10.21","237-3ubuntu10.22","237-3ubuntu10.23","237-3ubuntu10.24","237-3ubuntu10.25","237-3ubuntu10.26","237-3ubuntu10.28","237-3ubuntu10.29","237-3ubuntu10.31","237-3ubuntu10.33"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.27"}]}],"versions":["225-1ubuntu9","227-2ubuntu1","227-2ubuntu2","228-1ubuntu2","228-2ubuntu1","228-2ubuntu2","228-3ubuntu1","228-4ubuntu1","228-4ubuntu2","228-5ubuntu1","228-5ubuntu2","228-5ubuntu3","228-6ubuntu1","229-1ubuntu2","229-1ubuntu4","229-2ubuntu1","229-3ubuntu1","229-3ubuntu2","229-4ubuntu1","229-4ubuntu4","229-4ubuntu5","229-4ubuntu6","229-4ubuntu7","229-4ubuntu8","229-4ubuntu10","229-4ubuntu11","229-4ubuntu12","229-4ubuntu13","229-4ubuntu16","229-4ubuntu17","229-4ubuntu19","229-4ubuntu20","229-4ubuntu21","229-4ubuntu21.1","229-4ubuntu21.2","229-4ubuntu21.3","229-4ubuntu21.4","229-4ubuntu21.5","229-4ubuntu21.6","229-4ubuntu21.8","229-4ubuntu21.9","229-4ubuntu21.10","229-4ubuntu21.15","229-4ubuntu21.16","229-4ubuntu21.17","229-4ubuntu21.19","229-4ubuntu21.21","229-4ubuntu21.22","229-4ubuntu21.23"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.38"}]}],"versions":["234-2ubuntu12","235-2ubuntu3","235-3ubuntu2","235-3ubuntu3","237-3ubuntu3","237-3ubuntu4","237-3ubuntu6","237-3ubuntu7","237-3ubuntu8","237-3ubuntu10","237-3ubuntu10.2","237-3ubuntu10.3","237-3ubuntu10.4","237-3ubuntu10.6","237-3ubuntu10.9","237-3ubuntu10.11","237-3ubuntu10.12","237-3ubuntu10.13","237-3ubuntu10.15","237-3ubuntu10.17","237-3ubuntu10.19","237-3ubuntu10.20","237-3ubuntu10.21","237-3ubuntu10.22","237-3ubuntu10.23","237-3ubuntu10.24","237-3ubuntu10.25","237-3ubuntu10.26","237-3ubuntu10.28","237-3ubuntu10.29","237-3ubuntu10.31","237-3ubuntu10.33"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"234-lp151.26.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"systemd-mini","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"234-lp151.26.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.4-2.2"}]}],"bundled":19}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"netapp","product":"steelstore_cloud_integrated_storage"},{"vendor":"opensuse","product":"leap"},{"vendor":"systemd_project","product":"systemd"}],"references":[{"url":"https://github.com/systemd/systemd/commit/b2774a3ae692113e1f47a336a6c09bac9cfb49ad","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20200210-0002/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4269-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZPCOMW5X6IZZXASCDD2CNW2DLF3YADC/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20386","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZPCOMW5X6IZZXASCDD2CNW2DLF3YADC"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZPCOMW5X6IZZXASCDD2CNW2DLF3YADC"},{"url":"https://security.netapp.com/advisory/ntap-20200210-0002"},{"url":"https://usn.ubuntu.com/4269-1"},{"url":"https://github.com/advisories/GHSA-v2g8-4fgq-7rhx"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-20386","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0094.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25964","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4007","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1244691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1679934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1766477","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1769923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1769928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1775291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1778744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1812889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1814028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817576","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828953","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1832816","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4007.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20386","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20386","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4553","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1737283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1748840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1763435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1766479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1770379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1812894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816908","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1820112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1823767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1830861","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1838081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1844465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872243","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4553.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200335-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1084671","tags":["report"]},{"url":"https://bugzilla.suse.com/1092920","tags":["report"]},{"url":"https://bugzilla.suse.com/1106383","tags":["report"]},{"url":"https://bugzilla.suse.com/1133495","tags":["report"]},{"url":"https://bugzilla.suse.com/1151377","tags":["report"]},{"url":"https://bugzilla.suse.com/1154256","tags":["report"]},{"url":"https://bugzilla.suse.com/1155207","tags":["report"]},{"url":"https://bugzilla.suse.com/1155574","tags":["report"]},{"url":"https://bugzilla.suse.com/1156213","tags":["report"]},{"url":"https://bugzilla.suse.com/1156482","tags":["report"]},{"url":"https://bugzilla.suse.com/1158485","tags":["report"]},{"url":"https://bugzilla.suse.com/1159814","tags":["report"]},{"url":"https://bugzilla.suse.com/1161436","tags":["report"]},{"url":"https://bugzilla.suse.com/1162108","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1712","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201828-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1157315","tags":["report"]},{"url":"https://bugzilla.suse.com/1161262","tags":["report"]},{"url":"https://bugzilla.suse.com/1162698","tags":["report"]},{"url":"https://bugzilla.suse.com/1164538","tags":["report"]},{"url":"https://bugzilla.suse.com/1165633","tags":["report"]},{"url":"https://bugzilla.suse.com/1167622","tags":["report"]},{"url":"https://bugzilla.suse.com/1171145","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201842-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-20386","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4269-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-16888","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3844","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-1712","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3SLX2X3J4XZECXPBKC7QV2ZINGO53ABE/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15688","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-21029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33910","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-20386","description":"An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.","status":"published","published":"2020-01-21T05:12:30Z","modified":"2025-06-09T15:40:54.578Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:20:17.431882Z"}],"euvd":[{"id":"EUVD-2019-10938","description":"An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.","status":"published","published":"2020-01-21T05:12:30Z","modified":"2025-06-09T15:40:54Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:27.753525Z"}],"ghsa":[{"id":"GHSA-v2g8-4fgq-7rhx","title":"An issue was discovered in button_open in login/logind-button.c in systemd before 243. When...","description":"An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.","status":"published","published":"2022-05-24T17:07:02Z","modified":"2025-06-09T18:33:05Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-401","CWE-772"],"updated_at":"2026-11-02T15:02:38.272027Z"}],"nvd":[{"id":"CVE-2019-20386","description":"An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.","status":"published","published":"2020-01-21T06:15:11.827Z","modified":"2026-06-17T02:30:20.077Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary"},{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:05:42.416368Z"}],"osv":[{"id":"CVE-2019-20386","description":"An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.","status":"published","published":"2020-01-21T06:15:11.827Z","modified":"2026-10-24T14:07:05.653008695Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:12.010761Z"},{"id":"DEBIAN-CVE-2019-20386","description":"An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.","status":"published","published":"2020-01-21T06:15:11.827Z","modified":"2026-09-21T07:03:18.10483114Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"RHSA-2020:4007","title":"Red Hat Security Advisory: systemd security and bug fix update","status":"published","published":"2024-09-16T04:06:47Z","modified":"2026-06-26T12:22:26.651821761Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4553","title":"Red Hat Security Advisory: systemd security, bug fix, and enhancement update","status":"published","published":"2024-09-16T04:06:56Z","modified":"2025-11-22T12:11:19Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2019-20386","description":"An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.","status":"published","published":"2020-01-21T06:15:00Z","modified":"2026-04-22T12:17:16.57095Z","cvss":[{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"MGASA-2020-0094","title":"Updated systemd packages fix security vulnerabilities","description":"Updated systemd packages fix security vulnerabilities:\n\nIt was discovered that systemd incorrectly handled certain udevadm trigger\ncommands. A local attacker could possibly use this issue to cause systemd\nto consume resources, leading to a denial of service (CVE-2019-20386).\n\nTavis Ormandy discovered that systemd incorrectly handled certain Polkit\nqueries. A local attacker could use this issue to cause systemd to crash,\nresulting in a denial of service, or possibly execute arbitrary code and\nescalate privileges (CVE-2020-1712).\n","status":"published","published":"2020-02-21T23:06:01Z","modified":"2026-04-16T04:42:05.952650737Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0208-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2020-1712 (bsc#bsc#1162108)\n  Fix a heap use-after-free vulnerability, when asynchronous\n  Polkit queries were performed while handling Dbus messages. A local\n  unprivileged attacker could have abused this flaw to crash systemd services or\n  potentially execute code and elevate their privileges, by sending specially\n  crafted Dbus messages.\n\n- Use suse.pool.ntp.org server pool on SLE distros (jsc#SLE-7683)\n\n- libblkid: open device in nonblock mode. (bsc#1084671)\n- udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256)\n- bus_open leak sd_event_source when udevadm trigger。 (bsc#1161436 CVE-2019-20386)\n- fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (bsc#1133495 bsc#1159814)\n- fileio: initialize errno to zero before we do fread()\n- fileio: try to read one byte too much in read_full_stream()\n- logind: consider 'greeter' sessions suitable as 'display' sessions of a user (bsc#1158485)\n- logind: never elect a session that is stopping as display\n\n- journal: include kmsg lines from the systemd process which exec()d us (#8078)\n- udevd: don't use monitor after manager_exit()\n- udevd: capitalize log messages in on_sigchld()\n- udevd: merge conditions to decrease indentation\n- Revert 'udevd: fix crash when workers time out after exit is signal caught'\n- core: fragments of masked units ought not be considered for NeedDaemonReload (#7060) (bsc#1156482)\n- udevd: fix crash when workers time out after exit is signal caught\n- udevd: wait for workers to finish when exiting (bsc#1106383)\n\n- Improve bash completion support (bsc#1155207)\n  * shell-completion: systemctl: do not list template units in {re,}start\n  * shell-completion: systemctl: pass current word to all list_unit*\n  * bash-completion: systemctl: pass current partial unit to list-unit* (bsc#1155207)\n  * bash-completion: systemctl: use systemctl --no-pager\n  * bash-completion: also suggest template unit files\n  * bash-completion: systemctl: add missing options and verbs\n  * bash-completion: use the first argument instead of the global variable (#6457)\n\n- networkd: VXLan Make group and remote variable separate (bsc#1156213)\n- networkd: vxlan require Remote= to be a non multicast address (#8117) (bsc#1156213)\n- fs-util: let's avoid unnecessary strerror()\n- fs-util: introduce inotify_add_watch_and_warn() helper\n- ask-password: improve log message when inotify limit is reached (bsc#1155574)\n- shared/install: failing with -ELOOP can be due to the use of an alias in install_error() (bsc#1151377)\n- man: alias names can't be used with enable command (bsc#1151377)\n\n- Add boot option to not use swap at system start (jsc#SLE-7689)\n\n- Allow YaST to select Iranian (Persian, Farsi) keyboard layout\n  (bsc#1092920)\n  \nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-02-11T19:12:44Z","modified":"2026-02-04T04:29:12.048436Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:11420-1","title":"libsystemd0-249.4-2.2 on GA media","description":"These are all security issues fixed in the libsystemd0-249.4-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:45:22.858405Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2020:0335-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2020-1712 (bsc#bsc#1162108)\n  Fix a heap use-after-free vulnerability, when asynchronous\n  Polkit queries were performed while handling Dbus messages. A local\n  unprivileged attacker could have abused this flaw to crash systemd services or\n  potentially execute code and elevate their privileges, by sending specially\n  crafted Dbus messages.\n\n- Use suse.pool.ntp.org server pool on SLE distros (jsc#SLE-7683)\n\n- libblkid: open device in nonblock mode. (bsc#1084671)\n- udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256)\n- bus_open leak sd_event_source when udevadm trigger。 (bsc#1161436 CVE-2019-20386)\n- fileio: introduce read_full_virtual_file() for reading virtual files in sysfs, procfs (bsc#1133495 bsc#1159814)\n- fileio: initialize errno to zero before we do fread()\n- fileio: try to read one byte too much in read_full_stream()\n- logind: consider 'greeter' sessions suitable as 'display' sessions of a user (bsc#1158485)\n- logind: never elect a session that is stopping as display\n\n- journal: include kmsg lines from the systemd process which exec()d us (#8078)\n- udevd: don't use monitor after manager_exit()\n- udevd: capitalize log messages in on_sigchld()\n- udevd: merge conditions to decrease indentation\n- Revert 'udevd: fix crash when workers time out after exit is signal caught'\n- core: fragments of masked units ought not be considered for NeedDaemonReload (#7060) (bsc#1156482)\n- udevd: fix crash when workers time out after exit is signal caught\n- udevd: wait for workers to finish when exiting (bsc#1106383)\n\n- Improve bash completion support (bsc#1155207)\n  * shell-completion: systemctl: do not list template units in {re,}start\n  * shell-completion: systemctl: pass current word to all list_unit*\n  * bash-completion: systemctl: pass current partial unit to list-unit* (bsc#1155207)\n  * bash-completion: systemctl: use systemctl --no-pager\n  * bash-completion: also suggest template unit files\n  * bash-completion: systemctl: add missing options and verbs\n  * bash-completion: use the first argument instead of the global variable (#6457)\n\n- networkd: VXLan Make group and remote variable separate (bsc#1156213)\n- networkd: vxlan require Remote= to be a non multicast address (#8117) (bsc#1156213)\n- fs-util: let's avoid unnecessary strerror()\n- fs-util: introduce inotify_add_watch_and_warn() helper\n- ask-password: improve log message when inotify limit is reached (bsc#1155574)\n- shared/install: failing with -ELOOP can be due to the use of an alias in install_error() (bsc#1151377)\n- man: alias names can't be used with enable command (bsc#1151377)\n\n- Add boot option to not use swap at system start (jsc#SLE-7689)\n\n- Allow YaST to select Iranian (Persian, Farsi) keyboard layout\n  (bsc#1092920)\n  ","status":"published","published":"2020-02-06T10:37:45Z","modified":"2026-02-04T04:21:59.763475Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:1828-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command (bsc#1161436).\n- Renamed the persistent link for ATA devices (bsc#1164538)\n- shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)\n- tmpfiles: removed unnecessary assert (bsc#1171145)\n- pid1: by default make user units inherit their umask from the user manager (bsc#1162698)\n- manager: fixed job mode when signalled to shutdown etc (bsc#1161262)\n- coredump: fixed bug that loses core dump files when core dumps are compressed and disk space is low. (bsc#1167622)\n- udev: inform systemd how many workers we can potentially spawn (#4036) (bsc#1165633)\n- libblkid: open device in nonblock mode. (bsc#1084671)\n- udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256)\n","status":"published","published":"2020-07-02T11:07:36Z","modified":"2026-02-04T03:47:25.477879Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1842-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command (bsc#1161436).\n- Renamed the persistent link for ATA devices (bsc#1164538)\n- shared/install: try harder to find enablement symlinks when disabling a unit (bsc#1157315)\n- tmpfiles: removed unnecessary assert (bsc#1171145)\n- pid1: by default make user units inherit their umask from the user manager (bsc#1162698)\n- manager: fixed job mode when signalled to shutdown etc (bsc#1161262)\n- coredump: fixed bug that loses core dump files when core dumps are compressed and disk space is low. (bsc#1167622)\n- udev: inform systemd how many workers we can potentially spawn (#4036) (bsc#1165633)\n- libblkid: open device in nonblock mode. (bsc#1084671)\n- udev/cdrom_id: Do not open CD-rom in exclusive mode. (bsc#1154256)\n","status":"published","published":"2020-07-03T20:40:52Z","modified":"2026-02-04T03:09:11.107656Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-4269-1","title":"systemd vulnerabilities","description":"It was discovered that systemd incorrectly handled certain PIDFile files.\nA local attacker could possibly use this issue to trick systemd into\nkilling privileged processes. This issue only affected Ubuntu 16.04 LTS.\n(CVE-2018-16888)\n\nIt was discovered that systemd incorrectly handled certain udevadm trigger\ncommands. A local attacker could possibly use this issue to cause systemd\nto consume resources, leading to a denial of service. (CVE-2019-20386)\n\nJann Horn discovered that systemd incorrectly handled services that use the\nDynamicUser property. A local attacker could possibly use this issue to\naccess resources owned by a different service in the future. This issue\nonly affected Ubuntu 18.04 LTS. (CVE-2019-3843, CVE-2019-3844)\n\nTavis Ormandy discovered that systemd incorrectly handled certain Polkit\nqueries. A local attacker could use this issue to cause systemd to crash,\nresulting in a denial of service, or possibly execute arbitrary code and\nescalate privileges. (CVE-2020-1712)\n","status":"published","published":"2020-02-05T16:39:46Z","modified":"2026-04-27T15:48:47.521873468Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}