{"id":"MGASA-2014-0188","aliases":[],"status":"published","title":"Updated systemd packages fix a buffer overflow","description":"A stack-based buffer overflow was found in systemd-ask-password, a utility\nused to query a system password or passphrase from the user, using a\nquestion message specified on the command line. A local user could this\nflaw to crash the binary or even execute arbitrary code with the\npermissions of the user running the program.\n\nThe systemd packages shipped with Mageia 3 and 4 have been updated to\naddress this vulnerability.\n\nAdditionally, the Mageia 4 packages include various other general\nstability and performance fixed deemed appropriate for the stable\nupdates.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-04-23T16:07:45Z","modified":"2026-04-16T04:29:08Z","fixes":[{"ecosystem":"Mageia:3","package":"systemd","fixed_in":["195-22.2.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"systemd","fixed_in":["208-10.5.mga4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"195-22.2.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"208-10.5.mga4"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2014-0188.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-April/131370.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13219","tags":["report"]}],"sources":{"osv":[{"id":"MGASA-2014-0188","title":"Updated systemd packages fix a buffer overflow","description":"A stack-based buffer overflow was found in systemd-ask-password, a utility\nused to query a system password or passphrase from the user, using a\nquestion message specified on the command line. A local user could this\nflaw to crash the binary or even execute arbitrary code with the\npermissions of the user running the program.\n\nThe systemd packages shipped with Mageia 3 and 4 have been updated to\naddress this vulnerability.\n\nAdditionally, the Mageia 4 packages include various other general\nstability and performance fixed deemed appropriate for the stable\nupdates.\n","status":"published","published":"2014-04-23T16:07:45Z","modified":"2026-04-16T04:29:08.064471Z","updated_at":"2026-11-02T15:49:39.121227Z"}]}}