Filtered by vendor Systemd Project Subscriptions
Total 47 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-4391 2 Debian, Systemd Project 2 Debian Linux, Systemd 2022-01-31 N/A
Integer overflow in the valid_user_field function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow.
CVE-2013-4327 3 Canonical, Debian, Systemd Project 3 Ubuntu Linux, Debian Linux, Systemd 2022-01-31 N/A
systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
CVE-2012-0871 2 Opensuse, Systemd Project 2 Opensuse, Systemd 2022-01-28 N/A
The session_link_x11_socket function in login/logind-session.c in systemd-logind in systemd, possibly 37 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on the X11 user directory in /run/user/.
CVE-2015-7510 1 Systemd Project 1 Systemd 2022-01-28 N/A
Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd.
CVE-2012-1101 1 Systemd Project 1 Systemd 2022-01-28 5.5 Medium
systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure).
CVE-2016-7795 2 Canonical, Systemd Project 2 Ubuntu Linux, Systemd 2017-07-28 N/A
The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.
CVE-2016-10156 1 Systemd Project 1 Systemd 2017-07-26 N/A
A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their privileges to root. This is fixed in v229.