Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37412
HistoryOct 05, 2022 - 10:31 p.m.

Denial Of Service (DoS)

2022-10-0522:31:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
systemd
dos vulnerability
resolved-dns-stream.c
user-after-free
reference counting

0.002 Low

EPSS

Percentile

59.7%

systemd is vulnerable to denial of service. The vulnerability exists due to the on_stream_io() function and dns_stream_complete() function in resolved-dns-stream.c does not properly increment the reference counting for the DnsStream object, allowing an attacker to cause a system crash through the dereference in the DNSStream object, causing the user-after-free when the reference is still used later.