CyberSecBulletin

Systemd Project vulnerabilities

We track 2 vulnerabilities in Systemd Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 3, 2023.

2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score

Latest Systemd Project vulnerabilities

  • 7.8 High severity

    SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Improper Privilege Management

    CVE-2023-26604SiemensEPSS 1.05%

    systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other prog

  • 9.8 Critical severity

    systemd-resolved: Use After Free

    CVE-2022-2526Systemd-resolvedEPSS 1.42%

    A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions