ROS-20240425-05

A vulnerability in the systemctl status command of the Systemd service initialization and management subsystem is related to
access control flaws. Exploitation of the vulnerability could allow an attacker to gain access to
confidential data, compromise its integrity, and cause a denial of service

A vulnerability in the systemd-coredump service of the Systemd daemon is related to kernel misconfiguration
fs.suid_dumpable. Exploitation of the vulnerability could allow an attacker to affect the
confidentiality of protected information

Vulnerability in the_timespan() function of the time-util.c function of the service initialization and management subsystem of the
Systemd is related to the fact that certain values for time and precision cause a buffer restart in the
format_timespan(). Exploitation of the vulnerability could allow an attacker acting remotely to cause a
denial of service

A vulnerability in the network connection and domain name resolution management service (DNS) systemd-resolved
is related to a flaw in authenticating messages from DNS clients. Exploitation of the vulnerability could
allow a remote attacker to modify DNSSEC-protected DNS records by sending specially crafted DNS queries.
specially crafted DNS queries