Systemd Project Systemd vulnerabilities

• systemd In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary... CVE-2026-40228 2.9 LowApril 10, 2026
• systemd In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call... CVE-2026-40227 Fix available 6.2 MediumApril 10, 2026
• systemd In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted... CVE-2026-40226 Fix available 6.4 MediumApril 10, 2026
• systemd In udev in systemd before 260, local root execution can occur via malicious hardware devices and... CVE-2026-40225 Fix available 6.4 MediumApril 10, 2026
• systemd In systemd 259 before 260, there is local privilege escalation in systemd-machined because... CVE-2026-40224 Fix available 6.7 MediumApril 10, 2026
• systemd In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes... CVE-2026-40223 Fix available 4.7 MediumApril 10, 2026
• systemd systemd: Local unprivileged user can trigger an assert CVE-2026-29111 Fix available 5.5 MediumMarch 23, 2026
• debian linux, linux kernel, systemd project systemd +14 more +16 more Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump CVE-2025-4598 Fix available 4.7 MediumMay 29, 2025
• systemd project systemd, red hat cryostat 2, enterprise linux 8 +2 more +4 more Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes CVE-2023-7008 Fix available 5.9 MediumDecember 23, 2023
• systemd project systemd An issue was discovered in systemd 253. An attacker can modify the contents of past events in a... CVE-2023-31439 Disputed 5.3 MediumJune 13, 2023
• systemd project systemd An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then... CVE-2023-31438 Disputed 5.3 MediumJune 13, 2023
• systemd project systemd An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in... CVE-2023-31437 Disputed 5.3 MediumJune 13, 2023
• systemd project systemd, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more systemd before 247 does not adequately block local privilege escalation for some Sudo... CVE-2023-26604 Fix available 7.8 HighMarch 3, 2023
• systemd A vulnerability was found in systemd. This security flaw can cause a local information leak due... CVE-2022-4415 Fix available 5.5 MediumDecember 27, 2022
• systemd project systemd, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a... CVE-2022-45873 Fix available 5.5 MediumNovember 23, 2022
• systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 more An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c.... CVE-2022-3821 Fix available 5.5 MediumNovember 8, 2022
• systemd project systemd, netapp active iq unified manager, h300s firmware +3 more +5 more A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io()... CVE-2022-2526 Fix available 9.8 CriticalAugust 24, 2022
• systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 more A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial... CVE-2021-3997 Fix available 5.5 MediumJanuary 10, 2022
• systemd project systemd, debian linux, fedoraproject fedora +5 more +7 more basic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value... CVE-2021-33910 Fix available 5.5 MediumJuly 20, 2021
• systemd, fedoraproject fedora, netapp active iq unified manager +4 more +6 more An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP... CVE-2020-13529 Fix available 6.1 MediumMay 10, 2021
• systemd project systemd, fedoraproject fedora, netapp active iq unified manager +4 more +6 more systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x... CVE-2020-13776 Fix available 6.7 MediumJune 3, 2020
• systemd systemd 37-1 does not properly handle non-existent services, which causes a denial of service ... CVE-2012-1101 Fix available 5.5 MediumMarch 11, 2020
• [unknown] systemd, debian linux, redhat ceph storage +7 more +9 more A heap use-after-free vulnerability was found in systemd before version v245-rc1, where... CVE-2020-1712 Public exploitFix available 7.8 HighFebruary 5, 2020
• systemd project systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 more An issue was discovered in button_open in login/logind-button.c in systemd before 243. When... CVE-2019-20386 Fix available 2.4 LowJanuary 21, 2020
• systemd project systemd, fedoraproject fedora +1 more systemd 239 through 243 accepts any certificate signed by a trusted certificate authority for DNS... CVE-2018-21029 Fix availableDisputed 9.8 CriticalOctober 30, 2019
• systemd project systemd, fedoraproject fedora, redhat enterprise linux +11 more +13 more In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by... CVE-2019-15718 Fix available 4.4 MediumSeptember 3, 2019
• systemd project systemd, netapp cn1610 firmware, snapprotect +1 more +3 more systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext... CVE-2018-20839 Fix available 4.3 MediumMay 17, 2019
• [freedesktop.org] systemd, canonical ubuntu linux, fedoraproject fedora +4 more +6 more It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID... CVE-2019-3843 Public exploitFix available 4.5 MediumApril 26, 2019
• [freedesktop.org] systemd, canonical ubuntu linux, netapp cn1610 firmware +3 more +5 more It was discovered that a systemd service that uses DynamicUser property can get new privileges... CVE-2019-3844 Public exploitFix available 4.5 MediumApril 26, 2019
• systemd, debian linux, fedoraproject fedora +1 more +3 more In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the... CVE-2019-3842 Public exploitFix available 4.5 MediumApril 8, 2019
• systemd project systemd, canonical ubuntu linux, debian linux +19 more +21 more An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus... CVE-2019-6454 Fix available 5.5 MediumFebruary 18, 2019
• systemd, canonical ubuntu linux, netapp active iq performance analytics services +2 more +4 more It was discovered systemd does not correctly check the content of PIDFile files before using it... CVE-2018-16888 Fix available 4.4 MediumJanuary 14, 2019
• systemd, canonical ubuntu linux, debian linux +18 more +20 more An out of bounds read was discovered in systemd-journald in the way it parses log messages that... CVE-2018-16866 Fix available 4.3 MediumJanuary 11, 2019
• systemd, canonical ubuntu linux, debian linux +8 more +10 more An allocation of memory without limits, that could result in the stack clashing with another... CVE-2018-16865 Fix available 7.5 HighJanuary 9, 2019
• systemd, canonical ubuntu linux, debian linux +8 more +10 more An allocation of memory without limits, that could result in the stack clashing with another... CVE-2018-16864 Fix available 7.4 HighJanuary 9, 2019
• systemd, canonical ubuntu linux, debian linux +6 more +8 more Out-of-Bounds write in systemd-networkd dhcpv6 option handling CVE-2018-15688 Fix available 8.8 HighOctober 26, 2018
• systemd, canonical ubuntu linux +1 more systemd: chown_one() can dereference symlinks CVE-2018-15687 Public exploitFix available 7.8 HighOctober 26, 2018
• systemd, canonical ubuntu linux, debian linux +1 more +3 more systemd: reexec state injection: fgets() on overlong lines leads to line splitting CVE-2018-15686 Public exploitFix available 7.0 HighOctober 26, 2018
• systemd project systemd, canonical ubuntu linux, opensuse leap +2 more systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path... CVE-2018-6954 Fix available 7.8 HighFebruary 13, 2018
• systemd project systemd, debian linux, opensuse leap +2 more systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on... CVE-2017-18078 Public exploitFix available 7.8 HighJanuary 29, 2018
• red hat, inc. systemd, canonical ubuntu linux, debian linux +8 more +10 more In systemd prior to 234 a race condition exists between .mount and .automount units such that... CVE-2018-1049 Public exploitFix available 5.9 MediumJanuary 17, 2018
• systemd project systemd, canonical ubuntu linux +1 more In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC... CVE-2017-15908 Fix available EPSS 23.6% 7.5 HighOctober 26, 2017
• systemd project systemd Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss... CVE-2015-7510 Fix available 9.8 CriticalSeptember 25, 2017
• systemd project systemd systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. ... CVE-2017-1000082 Fix available 9.8 CriticalJuly 7, 2017
• systemd project systemd In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it... CVE-2017-9445 Fix available EPSS 54.8% 7.5 HighJune 27, 2017
• systemd project systemd systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash)... CVE-2017-9217 Fix available EPSS 15.3% 7.5 HighMay 24, 2017
• systemd project systemd A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created... CVE-2016-10156 Public exploitFix available 7.8 HighJanuary 23, 2017
• systemd project systemd, canonical ubuntu linux +1 more The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause... CVE-2016-7795 Fix available 5.5 MediumOctober 13, 2016
• systemd project systemd, novell suse linux enterprise desktop, suse linux enterprise server +6 more +8 more The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of... CVE-2016-7796 Fix available 5.5 MediumOctober 7, 2016
• systemd project systemd, opensuse +1 more The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd,... CVE-2012-0871 Fix available 6.3 MediumApril 18, 2014
• Show olderLoading…