● CVE — Medium
CVE-2019-6454
Vendordebian, fedoraproject, canonical, redhat, opensuseProductdebian linux, fedora, ubuntu linux, enterprise linux, enterprise linux eus, enterprise linux for ibm z systems eus, enterprise linux for power little endian, enterprise linux for power little endian eus, enterprise linux server, enterprise linux server aus, enterprise linux server for power little endian update services for sap solutions, enterprise linux server tus, leap, enterprise linux desktop, enterprise linux compute node eus, enterprise linux for power big endian eus, enterprise linux server update services for sap solutions, enterprise linux workstation, enterprise linux server eus, systemd, active iq performance analytics services, web gatewayDiscoveredMar 21, 2019UpdatedNov 21, 2024
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).