CVE-2020-1712

CWE-416 — Use After Free11 documents9 sources
Severity
7.8HIGH
EPSS
0.1%
top 71.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Systemd Project Systemd[unknown] SystemdDebian Debian Linux+4 more
Timeline
PublishedMar 31
Latest updateMay 24

Description

A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

▶Debiansystemd< 244.2-1+3
▶CVEListV5[unknown]/systemdbefore v245-rc1

Also affects: Debian Linux 9.0, Enterprise Linux 8.0, Openshift Container Platform 4.0

Patches

Patch: bugzilla.redhat.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-wggx-8wf7-vg3g: A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus↗2022-05-24
▶
CVEList
CVE-2020-1712: A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus↗2020-03-31
▶
OSV
CVE-2020-1712: A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus↗2020-03-31
▶

📋Vendor Advisories

4
Microsoft
A heap use-after-free vulnerability was found in systemd before version v245-rc1 where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse t↗2020-03-10
▶
Red Hat
systemd: use-after-free when asynchronous polkit queries are performed↗2020-02-05
▶
Ubuntu
systemd vulnerabilities↗2020-02-05
▶
Debian
CVE-2020-1712: systemd - A heap use-after-free vulnerability was found in systemd before version v245-rc1...↗2020
▶

💬Community

3
Bugzilla
CVE-2020-27757 ImageMagick: outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h↗2020-11-03
▶
Bugzilla
CVE-2020-1712 systemd: use-after-free when asynchronous polkit queries are performed [fedora-all]↗2020-02-05
▶
Bugzilla
CVE-2020-1712 systemd: use-after-free when asynchronous polkit queries are performed↗2020-01-23
▶