Lucene search
UbuntuUSN-5226-1HistoryJan 13, 2022 - 12:00 a.m.
systemd vulnerability
2022-01-1300:00:00
ubuntu.com
162
ubuntu
systemd
vulnerability
recursion
local attacker
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
5.9
Confidence
High
EPSS
0.001
Percentile
23.4%
Releases
- Ubuntu 21.10
- Ubuntu 21.04
- Ubuntu 20.04 LTS
Packages
- systemd - system and service manager
Details
It was discovered that systemd-tmpfiles employed uncontrolled recursion
when removing deeply nested directory hierarchies. A local attacker could
exploit this to cause systemd-tmpfiles to crash or have other unspecified
impacts.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 21.10 | noarch | systemd | < 248.3-1ubuntu8.2 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnss-myhostname | < 248.3-1ubuntu8.2 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnss-myhostname-dbgsym | < 248.3-1ubuntu8.2 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnss-mymachines | < 248.3-1ubuntu8.2 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnss-mymachines-dbgsym | < 248.3-1ubuntu8.2 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnss-resolve | < 248.3-1ubuntu8.2 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnss-resolve-dbgsym | < 248.3-1ubuntu8.2 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnss-systemd | < 248.3-1ubuntu8.2 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libnss-systemd-dbgsym | < 248.3-1ubuntu8.2 | UNKNOWN |
| Ubuntu | 21.10 | noarch | libpam-systemd | < 248.3-1ubuntu8.2 | UNKNOWN |
References
Related
prion
prion
Design/Logic Flaw
2022-08-23 20:15:00
nessus
nessus
EulerOS Virtualization 2.9.1 : systemd (EulerOS-SA-2022-1615)
2022-05-05 00:00:00
EulerOS Virtualization 2.10.0 : systemd (EulerOS-SA-2022-2039)
2022-07-14 00:00:00
EulerOS 2.0 SP9 : systemd (EulerOS-SA-2022-1439)
2022-04-18 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:0043-1)
2022-01-12 00:00:00
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2022-1639)
2022-05-05 00:00:00
Fedora: Security Advisory for systemd (FEDORA-2022-af1728fea9)
2022-01-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package systemd version 1:247.11-alt1
2022-02-04 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: systemd-249.9-1.fc35
2022-01-15 01:22:50
[SECURITY] Fedora 34 Update: systemd-248.10-1.fc34
2022-01-27 19:38:33
osv
osv
libsystemd0-249.7-3.1 on GA media
2024-06-15 00:00:00
CVE-2021-3997
2022-08-23 20:15:08
systemd vulnerability
2022-01-13 00:43:02
redhatcve
redhatcve
CVE-2021-3997
2022-01-11 09:24:28
nvd
nvd
CVE-2021-3997
2022-08-23 20:15:08
cvelist
cvelist
CVE-2021-3997
2022-08-23 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-01-15 21:54:14
cbl_mariner
cbl_mariner
CVE-2021-3997 affecting package systemd for versions less than 250.3-21
2024-04-30 01:31:53
CVE-2021-3997 affecting package systemd 239-42
2024-10-01 09:12:07
cve
cve
CVE-2021-3997
2022-08-23 20:15:08
suse
suse
Security update for systemd (moderate)
2022-02-21 00:00:00
Security update for htmldoc (moderate)
2022-02-17 00:00:00
cnvd
cnvd
systemd rm_rf_children() function denial of service vulnerability
2022-01-14 00:00:00
mageia
mageia
Updated systemd packages fix security vulnerability
2022-01-15 11:09:56
debiancve
debiancve
CVE-2021-3997
2022-08-23 20:15:08
ubuntucve
ubuntucve
CVE-2021-3997
2022-01-10 00:00:00
gentoo
gentoo
systemd: Multiple Vulnerabilities
2023-05-03 00:00:00
redos
redos
ROS-20240403-15
2024-04-03 00:00:00
qualysblog
qualysblog
thn
thn
New Linux Privilege Escalation Flaw Uncovered in Snap Package Manager
2022-02-18 08:37:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-0145
2022-01-22 00:00:00
Critical Photon OS Security Update - PHSA-2022-4.0-0145
2022-01-22 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in axios affect IBM Voice Gateway
2024-07-11 18:02:29
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
5.9
Confidence
High
EPSS
0.001
Percentile
23.4%
Related for USN-5226-1