CVE-2022-2526
published 2022-09-09CVE-2022-2526: A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in…
PriorityP339critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.10%
62.3th percentile
A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | systemd | < systemd 240-1 (bookworm) | systemd 240-1 (bookworm) |
| paloalto | pan-os | — | — |
| systemd_project | systemd | — | — |
| systemd_project | systemd | >= 0 < 240-1 | 240-1 |
| systemd_project | systemd | >= 0 < 240-1 | 240-1 |
| systemd_project | systemd | >= 0 < 240-1 | 240-1 |
| systemd_project | systemd | >= 0 < 240-1 | 240-1 |
| systemd_project | systemd | >= 0 < 237-3ubuntu10.54 | 237-3ubuntu10.54 |
| systemd_project | systemd | >= 0 < 237-3ubuntu10.56 | 237-3ubuntu10.56 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_oracle9.8CRITICAL
vendor_redhat9.8CRITICAL
vendor_ubuntu9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
ABB M2M Gateway
cisa_ics·2025-04-15
ABB M2M Gateway
ICS Advisory
##
ABB M2M Gateway
Release DateApril 15, 2025
Alert CodeICSA-25-105-08
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: ABB
- Equipment: M2M Gateway
- Vulnerabilities: Integer Overflow or Wraparound, Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), Unquoted Search Path or Element, Untrusted Search Path, Use After Free, Out-of-bounds Write, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Missing Release of Memory after Effective Lifetime, Allocation of Resources Without Limits or Throttling, Improper Privilege Management, Improper Limitati
Palo Alto
PAN-SA-2024-0001 Informational Bulletin: Impact of OSS CVEs in PAN-OS
vendor_paloalto·2024-02-14·CVSS 9.8
CVE-2017-18342 [CRITICAL] PAN-SA-2024-0001 Informational Bulletin: Impact of OSS CVEs in PAN-OS
PAN-SA-2024-0001 Informational Bulletin: Impact of OSS CVEs in PAN-OS
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to PAN-OS software. While PAN-OS software may include the
CVEs: CVE-2017-18342, CVE-2017-8923, CVE-2017-9120, CVE-2019-1551, CVE-2019-16865, CVE-2019-16905, CVE-2019-19523, CVE-2019-19528, CVE-2019-19911, CVE-2020-0404, CVE-2020-0431, CVE-2020-0466, CVE-2020-10379, CVE-2020-11538, CVE-2020-11608, CVE-2020-12114, CVE-2020-12321, CVE-2020-12362, CVE-2020-12363, CVE-2020-12364, CVE-2020-13757, CVE-2020-14314, CVE-2020-14351, CVE-2020-15778, CVE-2020-1967, CVE-2020-24394, CVE-2020-24504, CVE-2020-25211, CVE-2020-25212, CVE-2020-25284, CVE-2020-25285, CVE-2020-25717, CVE-2020-26541, CVE-2020-2715
Oracle
Oracle Oracle Communications Risk Matrix: ATS Framework (systemd-libs) — CVE-2022-2526
vendor_oracle·2023-01-15·CVSS 9.8
CVE-2022-2526 [CRITICAL] Oracle Oracle Communications Risk Matrix: ATS Framework (systemd-libs) — CVE-2022-2526
Oracle Oracle Communications Risk Matrix: ATS Framework (systemd-libs) vulnerability
CVE: CVE-2022-2526
CVSS: 9.8
Protocol: HTTP
Remote exploit: Yes
Affected versions: Network
Advisory: cpujan2023 (JAN 2023)
Ubuntu
systemd regression
vendor_ubuntu·2022-09-14·CVSS 9.8
CVE-2022-2526 [CRITICAL] systemd regression
Title: systemd regression
Summary: USN-5583-1 caused a regression in systemd
USN-5583-1 fixed vulnerabilities in systemd. Unfortunately this caused a
regression by introducing networking problems for some users. This update fixes
the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that systemd incorrectly handled certain DNS requests,
which leads to user-after-free vulnerability. An attacker could possibly use
this issue to cause a crash or execute arbitrary code. (CVE-2022-2526)
Instructions: In general, a standard system update will make all the necessary changes.
Ubuntu
systemd vulnerability
vendor_ubuntu·2022-08-29·CVSS 9.8
CVE-2022-2526 [CRITICAL] systemd vulnerability
Title: systemd vulnerability
Summary: systemd could be made to crash or run programs if it received specially
crafted DNS request.
It was discovered that systemd incorrectly handled certain DNS requests,
which leads to user-after-free vulnerability. An attacker could possibly use
this issue to cause a crash or execute arbitrary code. (CVE-2022-2526)
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c
vendor_redhat·2022-08-19·CVSS 9.8
CVE-2022-2526 [CRITICAL] CWE-416 systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c
systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c
A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.
A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causi
Debian
CVE-2022-2526: systemd - A use-after-free vulnerability was found in systemd. This issue occurs due to th...
vendor_debian·2022·CVSS 9.8
CVE-2022-2526 [CRITICAL] CVE-2022-2526: systemd - A use-after-free vulnerability was found in systemd. This issue occurs due to th...
A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.
Scope: local
bookworm: resolved (fixed in 240-1)
bullseye: resolved (fixed in 240-1)
forky: resolved (fixed in 240-1)
sid: resolved (fixed in 240-1)
trixie: resolved (fixed in 240-1)
VulDB
Oracle Communications Cloud Native Core Automated Test Suite ATS Framework use after free (EUVD-2022-34781 / Nessus ID 292749)
vuldb·2026-05-26·CVSS 9.8
CVE-2022-2526 [CRITICAL] Oracle Communications Cloud Native Core Automated Test Suite ATS Framework use after free (EUVD-2022-34781 / Nessus ID 292749)
A vulnerability identified as very critical has been detected in Oracle Communications Cloud Native Core Automated Test Suite 22.2.2/22.3.1/22.4.0. The impacted element is an unknown function of the component ATS Framework. Performing a manipulation results in use after free.
This vulnerability is reported as CVE-2022-2526. The attack is possible to be carried out remotely. No exploit exists.
VulDB
systemd DnsStream Object resolved-dns-stream.c on_stream_io/dns_stream_complete use after free (EUVD-2022-34781 / Nessus ID 292749)
vuldb·2026-05-26·CVSS 9.8
CVE-2022-2526 [CRITICAL] systemd DnsStream Object resolved-dns-stream.c on_stream_io/dns_stream_complete use after free (EUVD-2022-34781 / Nessus ID 292749)
A vulnerability categorized as critical has been discovered in systemd. This affects the function on_stream_io/dns_stream_complete of the file resolved-dns-stream.c of the component DnsStream Object Handler. Executing a manipulation can lead to use after free.
This vulnerability is handled as CVE-2022-2526. The attack can only be done within the local network. There is not any exploit available.
Applying a patch is advised to resolve this issue.
OSV
systemd regression
osv·2022-09-14·CVSS 9.8
CVE-2022-2526 [CRITICAL] systemd regression
systemd regression
USN-5583-1 fixed vulnerabilities in systemd. Unfortunately this caused a
regression by introducing networking problems for some users. This update fixes
the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that systemd incorrectly handled certain DNS requests,
which leads to user-after-free vulnerability. An attacker could possibly use
this issue to cause a crash or execute arbitrary code. (CVE-2022-2526)
GHSA
GHSA-f4r4-2gxf-88xj: A use-after-free vulnerability was found in systemd
ghsa_unreviewed·2022-09-10
CVE-2022-2526 [CRITICAL] CWE-416 GHSA-f4r4-2gxf-88xj: A use-after-free vulnerability was found in systemd
A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.
OSV
CVE-2022-2526: A use-after-free vulnerability was found in systemd
osv·2022-09-09·CVSS 9.8
CVE-2022-2526 [CRITICAL] CVE-2022-2526: A use-after-free vulnerability was found in systemd
A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete() function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the DNSStream object, causing the use-after-free when the reference is still used later.
OSV
systemd vulnerability
osv·2022-08-29·CVSS 9.8
CVE-2022-2526 [CRITICAL] systemd vulnerability
systemd vulnerability
It was discovered that systemd incorrectly handled certain DNS requests,
which leads to user-after-free vulnerability. An attacker could possibly use
this issue to cause a crash or execute arbitrary code. (CVE-2022-2526)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-09-09
Published