A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.

References

bugzilla.redhat.com/show_bug.cgi?id=2155515

nvd.nist.gov/vuln/detail/CVE-2022-4415

www.cve.org/CVERecord?id=CVE-2022-4415

almalinux 2

rocky 2

veracode 1

nessus 37

openvas 25

prion 1

osv 6

fedora 2

cve 1

cvelist 1

redhat 34

ibm 12

cbl_mariner 4

mageia 1

debiancve 1

nvd 1

oraclelinux 2

altlinux 1

ubuntucve 1

gentoo 1

ubuntu 1

photon 2

cloudfoundry 1

redos 1

ics 1

oracle 1

avleonov 1

almalinux

Moderate: systemd security and bug fix update

2023-02-21 00:00:00

Moderate: systemd security update

2023-02-28 00:00:00

rocky

systemd security and bug fix update

2023-02-22 01:08:44

systemd security update

2023-04-06 15:53:31

veracode

Information Disclosure

2023-03-07 00:47:40

nessus

EulerOS Virtualization 3.0.6.0 : systemd (EulerOS-SA-2023-3458)

2024-01-16 00:00:00

CentOS 8 : systemd (CESA-2023:0837)

2024-02-08 00:00:00

SUSE SLES12 Security Update : systemd (SUSE-SU-2022:4627-1)

2022-12-28 00:00:00

openvas

Mageia: Security Advisory (MGASA-2023-0217)

2023-07-10 00:00:00

Fedora: Security Advisory for systemd (FEDORA-2022-6919a53ea9)

2022-12-23 00:00:00

openSUSE: Security Advisory for systemd (SUSE-SU-2023:0201-1)

2024-03-04 00:00:00

prion

Design/Logic Flaw

2023-01-11 15:15:00

osv

Moderate: systemd security and bug fix update

2023-02-22 01:08:44

Moderate: systemd security and bug fix update

2023-02-21 00:00:00

CVE-2022-4415

2023-01-11 15:15:09

fedora

[SECURITY] Fedora 37 Update: systemd-251.10-588.fc37

2022-12-23 01:21:15

[SECURITY] Fedora 36 Update: systemd-250.9-1.fc36

2022-12-31 01:16:54

cve

CVE-2022-4415

2023-01-11 15:15:09

cvelist

CVE-2022-4415

2023-01-11 00:00:00

redhat

(RHSA-2023:0837) Moderate: systemd security and bug fix update

2023-02-21 08:46:23

(RHSA-2023:0954) Moderate: systemd security update

2023-02-28 07:53:01

(RHSA-2024:1105) Moderate: systemd security update

2024-03-05 10:44:55

ibm

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a sensitive information exposure in systemd (CVE-2022-4415)

2023-05-03 14:10:00

Security Bulletin: CVE-2022-4415 may affect IBM CICS TX Advanced 10.1

2023-06-08 18:23:43

Security Bulletin: A systemd vulnerability affects Data Replication on Cloud Pak for Data (CVE-2022-4415)

2023-11-08 12:42:37

cbl_mariner

CVE-2022-4415 affecting package systemd-bootstrap for versions less than 250.3-12

2023-03-24 23:57:10

CVE-2022-4415 affecting package systemd for versions less than 250.3-13

2023-02-01 18:10:09

CVE-2022-4415 affecting package systemd-bootstrap for versions less than 250.3-15

2024-03-19 17:21:46

mageia

Updated systemd packages fix security vulnerability

2023-07-07 08:54:45

debiancve

CVE-2022-4415

2023-01-11 15:15:09

nvd

CVE-2022-4415

2023-01-11 15:15:09

oraclelinux

systemd security and bug fix update

2023-02-22 00:00:00

systemd security update

2023-03-01 00:00:00

altlinux

Security fix for the ALT Linux 9 package systemd version 1:247.13-alt1

2023-01-20 00:00:00

ubuntucve

CVE-2022-4415

2023-01-11 00:00:00

gentoo

systemd: Multiple Vulnerabilities

2024-05-04 00:00:00

ubuntu

systemd vulnerabilities

2023-03-07 00:00:00

photon

Important Photon OS Security Update - PHSA-2022-0304

2022-12-21 00:00:00

Important Photon OS Security Update - PHSA-2022-4.0-0304

2022-12-21 00:00:00

cloudfoundry

USN-5928-1: systemd vulnerabilities | Cloud Foundry

2023-04-20 00:00:00

redos

ROS-20240425-05

2024-04-25 00:00:00

ics

Siemens SCALANCE XCM-/XRM-300

2024-02-15 12:00:00

oracle

Oracle Critical Patch Update Advisory - April 2023

2023-04-18 00:00:00

avleonov

Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs

2022-12-30 18:03:13

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for RH:CVE-2022-4415