The systemd Project systemd
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-3842 | v242-rc4 | In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable | HIGH 7.0 | 1.2 % | ||
| CVE-2019-3815 | v219-62.2 and newer | A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in jo | LOW 3.3 | 0.4 % | ||
| CVE-2018-16888 | v237 | It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run fro | MEDIUM 4.7 | 0.3 % | ||
| CVE-2018-16865 | through v240 | An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journa | HIGH 7.8 | 3.0 % | ||
| CVE-2018-16864 | through v240 | An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journa | HIGH 7.8 | 0.7 % | ||
| CVE-2018-16866 | from v221 to v239 | An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker | MEDIUM 4.3 | 1.1 % |