CVE-2022-3821

2022-11-0800:00:00

CWE-193

redhat

www.cve.org

off-by-one error

systemd

format_timespan()

buffer overrun

denial of service

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.7%

JSON

An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "systemd",
    "versions": [
      {
        "version": "Fixed in systemd v252-rc1",
        "status": "affected"
      }
    ]
  }
]