Systemd vulnerabilities

2 known vulnerabilities in Systemd from Systemd Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Improper Privilege Management

  CVE-2023-26604Mar 3, 2023SiemensEPSS 1.05%

  systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other prog

• 9.8 Critical severity

  systemd-resolved: Use After Free

  CVE-2022-2526Sep 9, 2022Systemd-resolvedEPSS 1.42%

  A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions