7.8
High
CVE-2020-1712 A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries…
Description
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| systemd | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
References
- bugzilla.redhat.com bugzilla.redhat.com
- www.openwall.com www.openwall.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- [debian-lts-announce] 20220630 [SECURITY] [DLA 3063-1] systemd security update lists.debian.org
Timeline
- Published
- Last modified