Denial Of Service (DoS)

2022-11-1617:05:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

systemd

time-util.c

vulnerability

0.001 Low

EPSS

Percentile

32.7%

JSON

systemd is vulnerable to denial of service. The vulnerability exists in format_timespan() function of time-util.c which allows an attacker to supply specific values for time and accuracy that leads to application crash.

CPENameOperatorVersion
systemd:sideq246.6-5
systemd:sideq247.3-2
systemdeq219__62.el7.7.0.1
systemdeq239__18.el8_1.2
systemdeq239__45.el8_4.2
systemdeq239__41.el8_3.2
systemdeq239__45.el8_4.1
systemdeq219__42.el7_4.11
systemdeq219__73.el7_8.8
systemdeq219__62.el7_6.6

Name	Operator	Version
systemd:sid	eq	246.6-5
systemd:sid	eq	247.3-2
systemd	eq	219__62.el7.7.0.1
systemd	eq	239__18.el8_1.2
systemd	eq	239__45.el8_4.2
systemd	eq	239__41.el8_3.2
systemd	eq	239__45.el8_4.1
systemd	eq	219__42.el7_4.11
systemd	eq	219__73.el7_8.8
systemd	eq	219__62.el7_6.6