systemd vulnerabilities (Ubuntu)
44 vulnerabilities.
-
systemdUbuntu systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path 6.7 Medium -
systemdUbuntu systemd-machined: unprivileged users can terminate arbitrary processes 4.7 Medium -
systemdUbuntu systemd-oomd: unprivileged users can terminate arbitrary processes 5.5 Medium -
systemdUbuntu In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary... 2.9 Low -
systemdUbuntu In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted... 6.4 Medium -
systemdUbuntu In udev in systemd before 260, local root execution can occur via malicious hardware devices and... 6.4 Medium -
systemdUbuntu systemd: Local unprivileged user can trigger an assert 5.5 Medium -
systemdUbuntu Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump 4.7 Medium -
systemdUbuntu Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes 5.9 Medium -
systemdUbuntu systemd before 247 does not adequately block local privilege escalation for some Sudo... 7.8 High -
systemdUbuntu A vulnerability was found in systemd. This security flaw can cause a local information leak due... 5.5 Medium -
systemdUbuntu An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c.... 5.5 Medium -
systemdUbuntu A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io()... 9.8 Critical -
systemdUbuntu A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial... 5.5 Medium -
systemdUbuntu basic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value... 5.5 Medium -
systemdUbuntu An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP... 6.1 Medium -
systemdUbuntu systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x... 6.7 Medium -
systemdUbuntu A heap use-after-free vulnerability was found in systemd before version v245-rc1, where... 7.8 High -
systemdUbuntu An issue was discovered in button_open in login/logind-button.c in systemd before 243. When... 2.4 Low -
systemdUbuntu DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none No score -
systemdUbuntu systemd regression No score -
systemdUbuntu In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by... 4.4 Medium -
systemdUbuntu It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID... 4.5 Medium -
systemdUbuntu It was discovered that a systemd service that uses DynamicUser property can get new privileges... 4.5 Medium -
systemdUbuntu In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the... 4.5 Medium -
systemdUbuntu An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus... 5.5 Medium -
systemdUbuntu It was discovered systemd does not correctly check the content of PIDFile files before using it... 4.4 Medium -
systemdUbuntu An out of bounds read was discovered in systemd-journald in the way it parses log messages that... 4.3 Medium -
systemdUbuntu An allocation of memory without limits, that could result in the stack clashing with another... 7.5 High -
systemdUbuntu An allocation of memory without limits, that could result in the stack clashing with another... 7.4 High -
systemdUbuntu systemd regression No score -
systemdUbuntu Out-of-Bounds write in systemd-networkd dhcpv6 option handling 8.8 High -
systemdUbuntu systemd: chown_one() can dereference symlinks 7.8 High -
systemdUbuntu systemd: reexec state injection: fgets() on overlong lines leads to line splitting 7.0 High -
systemdUbuntu systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path... 7.8 High -
systemdUbuntu systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on... 7.8 High -
systemdUbuntu In systemd prior to 234 a race condition exists between .mount and .automount units such that... 5.9 Medium -
systemdUbuntu In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC... 7.5 High -
systemdUbuntu systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. ... 9.8 Critical -
systemdUbuntu In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it... 7.5 High -
systemdUbuntu systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash)... 7.5 High -
systemdUbuntu The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause... 5.5 Medium -
systemdUbuntu The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of... 5.5 Medium -
systemdUbuntu systemd vulnerability No score