Vulnerabilidades em The systemd Project
6 resultadosAnálise Vexday
O systemd Project apresenta um perfil de risco contido com apenas 6 CVEs catalogadas, nenhuma sob exploração ativa confirmada e zero vulnerabilidades críticas. A fraqueza predominante (CWE-770 - Alocação de Recursos sem Limite) sugere riscos de negação de serviço, mas a ausência de publicações recentes indica que a superfície de ataque é estável.
CVE-2018-16865HIGHAn allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journaEPSS 3.0%CVE-2019-3842MEDIUMIn systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variableEPSS 1.2%CVE-2018-16866MEDIUMAn out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attackerEPSS 1.1%CVE-2018-16864HIGHAn allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journaEPSS 0.7%CVE-2019-3815LOWA memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in joEPSS 0.4%CVE-2018-16888MEDIUMIt was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run froEPSS 0.3%