High · published March 31, 2020
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
| Product | Versions | Fixed in |
|---|---|---|
| systemd_project/systemd | ≤ 244 | — |
| redhat/ceph_storage | all versions | — |
| redhat/discovery | all versions | — |
| redhat/migration_toolkit | all versions | — |
| redhat/openshift_container_platform | all versions | — |
| redhat/enterprise_linux | all versions | — |
| debian/debian_linux | all versions | — |