{"id":"CVE-2023-26604","aliases":["ALSA-2023:3837","CLSA-2023-1679349729","CLSA-2023-1679350239","CLSA-2023-1679350567","CLSA-2023-1688678794","CLSA-2023-1698690423","CLSA-2024-1711562715","CLSA-2026-1777378650","DEBIAN-CVE-2023-26604","DLA-3377-1","EUVD-2023-30399","GHSA-8989-8fhv-vq42","OESA-2023-1166","OESA-2023-1167","RHSA-2023:3837","RHSA-2024:1105","RHSA-2024:7705","RLSA-2023:3837","SUSE-SU-2023:1622-1","SUSE-SU-2023:1776-1","SUSE-SU-2025:02019-1","UBUNTU-CVE-2023-26604"],"status":"published","title":"systemd before 247 does not adequately block local privilege escalation for some Sudo...","description":"systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \"systemctl status\" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01051,"percentile":0.64527,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269"],"published":"2023-03-03T00:00:00Z","modified":"2026-10-29T11:02:08Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"systemd","fixed_in":["239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-container","fixed_in":["239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-devel","fixed_in":["239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-journal-remote","fixed_in":["239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-libs","fixed_in":["239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-pam","fixed_in":["239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-tests","fixed_in":["239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"systemd-udev","fixed_in":["239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd","fixed_in":["239-45.el8_4.3.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-container","fixed_in":["239-45.el8_4.3.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-devel","fixed_in":["239-45.el8_4.3.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-journal-remote","fixed_in":["239-45.el8_4.3.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-libs","fixed_in":["239-45.el8_4.3.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-pam","fixed_in":["239-45.el8_4.3.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-tests","fixed_in":["239-45.el8_4.3.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"systemd-udev","fixed_in":["239-45.el8_4.3.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd","fixed_in":["239-51.el8_5.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-container","fixed_in":["239-51.el8_5.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-devel","fixed_in":["239-51.el8_5.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-journal-remote","fixed_in":["239-51.el8_5.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-libs","fixed_in":["239-51.el8_5.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-pam","fixed_in":["239-51.el8_5.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-tests","fixed_in":["239-51.el8_5.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"systemd-udev","fixed_in":["239-51.el8_5.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-myhostname","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-mymachines","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-resolve","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-systemd","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-systemd","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsystemd-dev","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsystemd0","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libudev-dev","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libudev1","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"systemd","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"systemd-container","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"systemd-coredump","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"systemd-journal-remote","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"systemd-sysv","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"systemd-tests","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"udev","fixed_in":["237-3ubuntu10.57+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libgudev1","fixed_in":["219-78.el7_9.7.tuxcare.els1","219-78.el7_9.9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libgudev1-devel","fixed_in":["219-78.el7_9.7.tuxcare.els1","219-78.el7_9.9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"systemd","fixed_in":["219-78.el7_9.7.tuxcare.els1","219-78.el7_9.9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"systemd-devel","fixed_in":["219-78.el7_9.7.tuxcare.els1","219-78.el7_9.9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"systemd-journal-gateway","fixed_in":["219-78.el7_9.7.tuxcare.els1","219-78.el7_9.9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"systemd-libs","fixed_in":["219-78.el7_9.7.tuxcare.els1","219-78.el7_9.9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"systemd-networkd","fixed_in":["219-78.el7_9.7.tuxcare.els1","219-78.el7_9.9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"systemd-python","fixed_in":["219-78.el7_9.7.tuxcare.els1","219-78.el7_9.9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"systemd-resolved","fixed_in":["219-78.el7_9.7.tuxcare.els1","219-78.el7_9.9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"systemd-sysv","fixed_in":["219-78.el7_9.7.tuxcare.els1","219-78.el7_9.9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss-myhostname","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss-mymachines","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss-resolve","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss-systemd","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libpam-systemd","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libsystemd-dev","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libsystemd0","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libudev-dev","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"libudev1","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd-container","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd-coredump","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd-journal-remote","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd-sysv","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd-tests","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd-timesyncd","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"udev","fixed_in":["245.4-4ubuntu3.24+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"systemd","fixed_in":["247.1-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"systemd","fixed_in":["247.1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"systemd","fixed_in":["247.1-2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"systemd","fixed_in":["241-7~deb10u9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"systemd","fixed_in":["243-59.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"systemd","fixed_in":["243-60.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container-debuginfo","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debuginfo","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debugsource","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-devel","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote-debuginfo","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs-debuginfo","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam-debuginfo","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests-debuginfo","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev-debuginfo","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libgudev1","fixed_in":["0:219-78.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"libgudev1-devel","fixed_in":["0:219-78.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"systemd","fixed_in":["0:219-78.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"systemd-debuginfo","fixed_in":["0:219-78.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"systemd-devel","fixed_in":["0:219-78.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"systemd-libs","fixed_in":["0:219-78.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"systemd-python","fixed_in":["0:219-78.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"systemd-sysv","fixed_in":["0:219-78.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"systemd-journal-gateway","fixed_in":["0:219-78.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"systemd-networkd","fixed_in":["0:219-78.el7_9.11"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"systemd-resolved","fixed_in":["0:219-78.el7_9.11"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"systemd","fixed_in":["0:239-74.el8_8.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"systemd","fixed_in":["228-157.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"systemd","fixed_in":["228-157.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"systemd","fixed_in":["228-157.52.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss-myhostname","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss-mymachines","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss-resolve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsystemd-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsystemd0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libudev-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"systemd-coredump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.33+tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-45.el8_4.3.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-51.el8_5.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-myhostname","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-mymachines","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-resolve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsystemd-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsystemd0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libudev-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"systemd-coredump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.57+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"219-78.el7_9.9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss-myhostname","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss-mymachines","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss-resolve","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libnss-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libpam-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libsystemd-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libsystemd0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libudev-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"libudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd-coredump","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"systemd-timesyncd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.24+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"247.1-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"247.1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"247.1-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-7~deb10u9"}]}],"versions":["241-5","241-6","241-7~deb10u1","241-7~deb10u2","241-7~deb10u3","241-7~deb10u4","241-7~deb10u5","241-7~deb10u6","241-7~deb10u7","241-7~deb10u8"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"243-59.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"243-60.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-container-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-journal-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"systemd-udev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-58.el8_6.13"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7_9.11"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-78.el7_9.11"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-74.el8_8.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-157.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.108.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.108.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.108.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.108.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.108.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.108.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.60.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.60.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.60.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.60.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.60.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"246.16-150300.7.60.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["204-0ubuntu18","204-0ubuntu19","204-5ubuntu3","204-5ubuntu5","204-5ubuntu6","204-5ubuntu7","204-5ubuntu8","204-5ubuntu9","204-5ubuntu10","204-5ubuntu11","204-5ubuntu13","204-5ubuntu14","204-5ubuntu15","204-5ubuntu16","204-5ubuntu17","204-5ubuntu18","204-5ubuntu19","204-5ubuntu20","204-5ubuntu20.2","204-5ubuntu20.3","204-5ubuntu20.4","204-5ubuntu20.5","204-5ubuntu20.6","204-5ubuntu20.7","204-5ubuntu20.8","204-5ubuntu20.9","204-5ubuntu20.10","204-5ubuntu20.11","204-5ubuntu20.12","204-5ubuntu20.13","204-5ubuntu20.14","204-5ubuntu20.15","204-5ubuntu20.18","204-5ubuntu20.19","204-5ubuntu20.20","204-5ubuntu20.21","204-5ubuntu20.22","204-5ubuntu20.24","204-5ubuntu20.25","204-5ubuntu20.26","204-5ubuntu20.28","204-5ubuntu20.29","204-5ubuntu20.31","204-5ubuntu20.31+esm2","204-5ubuntu20.31+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["225-1ubuntu9","227-2ubuntu1","227-2ubuntu2","228-1ubuntu2","228-2ubuntu1","228-2ubuntu2","228-3ubuntu1","228-4ubuntu1","228-4ubuntu2","228-5ubuntu1","228-5ubuntu2","228-5ubuntu3","228-6ubuntu1","229-1ubuntu2","229-1ubuntu4","229-2ubuntu1","229-3ubuntu1","229-3ubuntu2","229-4ubuntu1","229-4ubuntu4","229-4ubuntu5","229-4ubuntu6","229-4ubuntu7","229-4ubuntu8","229-4ubuntu10","229-4ubuntu11","229-4ubuntu12","229-4ubuntu13","229-4ubuntu16","229-4ubuntu17","229-4ubuntu19","229-4ubuntu20","229-4ubuntu21","229-4ubuntu21.1","229-4ubuntu21.2","229-4ubuntu21.3","229-4ubuntu21.4","229-4ubuntu21.5","229-4ubuntu21.6","229-4ubuntu21.8","229-4ubuntu21.9","229-4ubuntu21.10","229-4ubuntu21.15","229-4ubuntu21.16","229-4ubuntu21.17","229-4ubuntu21.19","229-4ubuntu21.21","229-4ubuntu21.22","229-4ubuntu21.23","229-4ubuntu21.27","229-4ubuntu21.28","229-4ubuntu21.29","229-4ubuntu21.31","229-4ubuntu21.31+esm1","229-4ubuntu21.31+esm3","229-4ubuntu21.31+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["234-2ubuntu12","235-2ubuntu3","235-3ubuntu2","235-3ubuntu3","237-3ubuntu3","237-3ubuntu4","237-3ubuntu6","237-3ubuntu7","237-3ubuntu8","237-3ubuntu10","237-3ubuntu10.2","237-3ubuntu10.3","237-3ubuntu10.4","237-3ubuntu10.6","237-3ubuntu10.9","237-3ubuntu10.11","237-3ubuntu10.12","237-3ubuntu10.13","237-3ubuntu10.15","237-3ubuntu10.17","237-3ubuntu10.19","237-3ubuntu10.20","237-3ubuntu10.21","237-3ubuntu10.22","237-3ubuntu10.23","237-3ubuntu10.24","237-3ubuntu10.25","237-3ubuntu10.26","237-3ubuntu10.28","237-3ubuntu10.29","237-3ubuntu10.31","237-3ubuntu10.33","237-3ubuntu10.38","237-3ubuntu10.39","237-3ubuntu10.40","237-3ubuntu10.41","237-3ubuntu10.42","237-3ubuntu10.43","237-3ubuntu10.44","237-3ubuntu10.45","237-3ubuntu10.46","237-3ubuntu10.47","237-3ubuntu10.48","237-3ubuntu10.49","237-3ubuntu10.50","237-3ubuntu10.51","237-3ubuntu10.52","237-3ubuntu10.53","237-3ubuntu10.54","237-3ubuntu10.56","237-3ubuntu10.57","237-3ubuntu10.57+esm2","237-3ubuntu10.57+esm3","237-3ubuntu10.57+esm4","237-3ubuntu10.57+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["242-7ubuntu3","243-2ubuntu1","243-3ubuntu1","244-3ubuntu1","244.1-0ubuntu2","244.1-0ubuntu3","244.2-1ubuntu1","244.3-1ubuntu1","245.2-1ubuntu1","245.2-1ubuntu2","245.4-2ubuntu1","245.4-4ubuntu1","245.4-4ubuntu3","245.4-4ubuntu3.1","245.4-4ubuntu3.2","245.4-4ubuntu3.3","245.4-4ubuntu3.4","245.4-4ubuntu3.5","245.4-4ubuntu3.6","245.4-4ubuntu3.7","245.4-4ubuntu3.10","245.4-4ubuntu3.11","245.4-4ubuntu3.13","245.4-4ubuntu3.14","245.4-4ubuntu3.15","245.4-4ubuntu3.16","245.4-4ubuntu3.17","245.4-4ubuntu3.18","245.4-4ubuntu3.19","245.4-4ubuntu3.20","245.4-4ubuntu3.21","245.4-4ubuntu3.22","245.4-4ubuntu3.23","245.4-4ubuntu3.24","245.4-4ubuntu3.24+esm1","245.4-4ubuntu3.24+esm3","245.4-4ubuntu3.24+esm4","245.4-4ubuntu3.24+esm5","245.4-4ubuntu3.24+esm6"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"systemd_project","product":"systemd"}],"references":[{"url":"https://medium.com/%40zenmoviefornotification/saidov-maxim-cve-2023-26604-c1232a526ba7","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://github.com/systemd/systemd/blob/main/NEWS#L4335-L4340","tags":["x_transferred","Release Notes","web","report"]},{"url":"https://blog.compass-security.com/2012/10/dangerous-sudoers-entries-part-2-insecure-functionality/","tags":["x_transferred","Exploit","Third Party Advisory","article","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/03/msg00032.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://security.netapp.com/advisory/ntap-20230505-0009/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://packetstormsecurity.com/files/174130/systemd-246-Local-Root-Privilege-Escalation.html","tags":["x_transferred","Exploit","Third Party Advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26604","tags":["advisory"]},{"url":"https://medium.com/@zenmoviefornotification/saidov-maxim-cve-2023-26604-c1232a526ba7","tags":["article","report"]},{"url":"https://blog.compass-security.com/2012/10/dangerous-sudoers-entries-part-2-insecure-functionality"},{"url":"https://security.netapp.com/advisory/ntap-20230505-0009"},{"url":"https://github.com/advisories/GHSA-8989-8fhv-vq42"},{"url":"https://access.redhat.com/errata/RHSA-2023:3837","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26604","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175611","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-3837.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1679349729","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1679350239.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1679350567.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1688678794","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos7-els/CLSA-2023-1698690423.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1711562715.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1777378650.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26604.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-26604","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1166","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1167","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2190153","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3837.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26604","tags":["advisory","report"]},{"url":"https://github.com/systemd/systemd/issues/5666","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1105","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155515","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1105.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3821","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3821","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3821","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4415","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4415","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4415","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:7705","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-17394","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7705.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:3837","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231622-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206985","tags":["report"]},{"url":"https://bugzilla.suse.com/1208958","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26604","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231776-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191502","tags":["report"]},{"url":"https://bugzilla.suse.com/1195529","tags":["report"]},{"url":"https://bugzilla.suse.com/1197244","tags":["report"]},{"url":"https://bugzilla.suse.com/1198507","tags":["report"]},{"url":"https://bugzilla.suse.com/1204423","tags":["report"]},{"url":"https://bugzilla.suse.com/1204968","tags":["report"]},{"url":"https://bugzilla.suse.com/1205000","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4415","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502019-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1211576","tags":["report"]},{"url":"https://bugzilla.suse.com/1211725","tags":["report"]},{"url":"https://bugzilla.suse.com/1215241","tags":["report"]},{"url":"https://bugzilla.suse.com/1243935","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4598","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-26604","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-26604","description":"systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \"systemctl status\" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.","status":"published","published":"2023-03-03T00:00:00Z","modified":"2026-10-14T22:32:08.235Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:35:15.434947Z"}],"euvd":[{"id":"EUVD-2023-30399","description":"systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \"systemctl status\" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.","status":"published","published":"2023-03-03T00:00:00Z","modified":"2026-10-14T22:32:08Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:11.707191Z"}],"ghsa":[{"id":"GHSA-8989-8fhv-vq42","title":"systemd before 247 does not adequately block local privilege escalation for some Sudo...","description":"systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \"systemctl status\" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.","status":"published","published":"2023-03-03T18:30:27Z","modified":"2026-10-15T00:31:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:13:29.914076Z"}],"nvd":[{"id":"CVE-2023-26604","description":"systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \"systemctl status\" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.","status":"published","published":"2023-03-03T16:15:10.607Z","modified":"2026-10-14T23:17:15.447Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:07:48.342507Z"}],"osv":[{"id":"CVE-2023-26604","description":"systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \"systemctl status\" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.","status":"published","published":"2023-03-03T00:00:00Z","modified":"2026-10-28T10:32:36.458670959Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:31.135751Z"},{"id":"DEBIAN-CVE-2023-26604","description":"systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \"systemctl status\" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.","status":"published","published":"2023-03-03T16:15:10.607Z","modified":"2026-10-26T18:01:46.682680484Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"OESA-2023-1166","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\r\n\r\nsystemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \u0026quot;systemctl status\u0026quot; command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.(CVE-2023-26604)","status":"published","published":"2023-03-17T11:05:38Z","modified":"2026-08-18T01:17:37.292171915Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1167","title":"systemd security update","description":"systemd is a system and service manager that runs as PID 1 and starts the rest of the system.\r\n\r\nSecurity Fix(es):\r\n\r\nsystemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \u0026quot;systemctl status\u0026quot; command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.(CVE-2023-26604)","status":"published","published":"2023-03-17T11:05:38Z","modified":"2026-08-18T01:17:38.739859356Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:3837","title":"Red Hat Security Advisory: systemd security and bug fix update","status":"published","published":"2024-09-16T11:41:51Z","modified":"2026-06-30T10:04:08Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2024:1105","title":"Red Hat Security Advisory: systemd security update","status":"published","published":"2024-09-16T11:42:01Z","modified":"2026-06-30T10:06:27Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:7705","title":"Red Hat Security Advisory: systemd security update","status":"published","published":"2024-10-07T21:42:24Z","modified":"2026-06-30T10:09:00Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RLSA-2023:3837","title":"Moderate: systemd security and bug fix update","description":"The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.\n\nSecurity Fix(es):\n\n* systemd: privilege escalation via the less pager (CVE-2023-26604)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* systemd-pstore crashes when attempting to move standalone files out of /sys/fs/pstore (BZ#2190153)","status":"published","published":"2023-08-31T16:54:20.523044Z","modified":"2026-02-05T00:30:15.395601Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-26604","description":"systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \"systemctl status\" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.","status":"published","published":"2023-03-03T16:15:00Z","modified":"2026-10-17T12:57:16.32435654Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"ALSA-2023:3837","title":"Moderate: systemd security and bug fix update","description":"The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.\n\nSecurity Fix(es):\n\n* systemd: privilege escalation via the less pager (CVE-2023-26604)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* systemd-pstore crashes when attempting to move standalone files out of /sys/fs/pstore (BZ#2190153)","status":"published","published":"2023-06-27T00:00:00Z","modified":"2026-10-29T11:02:08.932549254Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2023-1679349729","title":"Fix CVE(s): CVE-2023-26604, CVE-2022-3821","description":"\n   * SECURITY UPDATE: buffer overrun vulnerability in format_timespan()\n     - debian/patches/CVE-2022-3821.patch: fix buffer-over-run\n     - CVE-2022-3821\n   * SECURITY UPDATE: a local privelege escalation for some sudo configs\n     was not blocked adequately\n     - debian/patches/CVE-2023-26604.patch: use only less as a pager and\n     restrict its functionality (e.g stop running external shell) unless\n     environment variable SYSTEMD_PAGERSECURE is defined\n     - CVE-2023-26604","status":"published","published":"2023-03-20T22:02:09Z","modified":"2026-06-04T10:03:42.728500358Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1679350239","title":"systemd: Fix of CVE-2023-26604","description":"- CVE-2023-26604: prevent a priveledge escalation in a pager sub-process\n- test_login was updated","status":"published","published":"2023-03-20T22:10:39Z","modified":"2026-06-01T00:33:20.315154136Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1679350567","title":"systemd: Fix of CVE-2023-26604","description":"- CVE-2023-26604: prevent a priveledge escalation in a pager sub-process\n- test_login was updated","status":"published","published":"2023-03-20T22:16:07Z","modified":"2026-06-01T00:33:21.803592944Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1688678794","title":"Fix CVE(s): CVE-2023-26604","description":"\n   * SECURITY UPDATE: local privilege escalation for some Sudo configurations\n     - debian/patches/CVE-2023-26604.patch: set LESSSECURE to 1\n     - CVE-2023-26604\n   * test issue: udev-test.pl is stopped by a timeout in a virtual environment\n     - debian/patches/fix-udev-test.patch: skip this test in some cases","status":"published","published":"2023-07-06T21:26:39Z","modified":"2026-06-04T10:04:22.394719Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1698690423","title":"systemd: Fix of CVE-2023-26604","description":"- CVE-2023-26604: use only less as a pager and restrict its functionality\n  (e.g stop running external shell) unless environment variable\n  SYSTEMD_PAGERSECURE is defined","status":"published","published":"2023-10-30T18:27:08Z","modified":"2026-06-01T00:33:17.273748126Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2024-1711562715","title":"systemd: Fix of CVE-2023-26604","description":"- Moved tuxcare patches from 219-78.7.tuxcare.els1\n- CVE-2023-26604: use only less as a pager and restrict its functionality\n  (e.g stop running external shell) unless environment variable\n  SYSTEMD_PAGERSECURE is defined","status":"published","published":"2024-03-27T18:05:17Z","modified":"2026-06-01T00:33:17.421608106Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2026-1777378650","title":"Fix CVE(s): CVE-2023-26604","description":"   * SECURITY UPDATE: systemctl may pass arbitrary shell commands from a\n     pager like more(1) that does not honor LESSSECURE, allowing privilege\n     escalation under sudo.\n     - debian/patches/CVE-2023-26604.patch: set LESSSECURE=1 when invoking\n       a pager, rename to SYSTEMD_PAGERSECURE, gate insecure pagers behind\n       sd_pid_get_owner_uid()/euid check, skip non-\"less\" pagers in secure\n       mode, and read the envvar via secure_getenv(). Squash of upstream\n       commits 612ebf6c91, 0a42426d79, and b8f736b30e (src/shared/pager.c\n       only; man-page hunks dropped).\n     - CVE-2023-26604","status":"published","published":"2026-04-28T12:17:35Z","modified":"2026-06-04T10:04:17.800493Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-3377-1","title":"systemd - security update","status":"published","published":"2023-03-31T00:00:00Z","modified":"2026-03-09T01:22:53.65815Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"SUSE-SU-2023:1622-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2023-26604: Fixed a privilege escalation via the less pager. (bsc#1208958)\n","status":"published","published":"2023-03-28T09:26:37Z","modified":"2025-05-02T04:34:45.395947Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:1776-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2023-26604: Fixed a privilege escalation via the less pager. (bsc#1208958)\n- CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000).\n- CVE-2022-3821: Fixed buffer overrun in format_timespan() function (bsc#1204968).\n\nBug fixes:\n\n- Restrict cpu rule to x86_64, and also update the rule files to make use of the 'CONST{arch}' syntax (bsc#1204423).\n- Fixed 'systemd --user' call pam_loginuid when creating user@.service (bsc#1198507).\n- Fixed 'systemd-detect-virt' refine hypervisor detection (bsc#1197244).\n- Fixed 'udev' 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529).\n- Fixed 'man' tweak description of auto/noauto (bsc#1191502).\n","status":"published","published":"2023-04-05T13:20:40Z","modified":"2026-02-04T02:52:37.239233Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2025:02019-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n- CVE-2025-4598: Race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935).\n- CVE-2023-26604: Privilege escalation via the less pager (bsc#1208958).\n- CVE-2022-4415: systemd-coredump was not respecting fs.suid_dumpable kernel setting (bsc#1205000).\n\nOther bugfixes:\n\n- clarify passno and noauto combination in /etc/fstab (bsc#1211725)\n- handle -EINTR return from bus_poll() (bsc#1215241)\n- /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)\n","status":"published","published":"2025-06-19T07:58:03Z","modified":"2026-02-04T03:27:02.920906Z","updated_at":"2026-11-02T15:53:56.647031Z"}]}}