CVE-2019-6454
- State
- Published
- Severity
- Not scored
- Published
- Mar 17, 2019
- Updated
- Aug 4, 2024
- Reserved
- Jan 16, 2019
Description
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- FEDORA-2019-8434288a24vendor-advisory
- [oss-security] 20190218 CVE-2019-6454: systemd (PID1) crash with specially crafted D-Bus messagemailing-list
- 107081vdb-entry
- USN-3891-1vendor-advisory
- RHSA-2019:0368vendor-advisory
- https://github.com/systemd/systemd/commits/master/src/libsystemd/sd-bus/bus-objects.c
- SUSE-SA:2019:0255-1vendor-advisory
- [oss-security] 20190219 CVE-2019-6454: systemd (PID1) crash with specially crafted D-Bus messagemailing-list
- [SECURITY] [DLA 1684-1] 20190219 systemd security updatemailing-list
- DSA-4393-1vendor-advisory
- https://security.netapp.com/advisory/ntap-20190327-0004/
- https://kc.mcafee.com/corporate/index?page=content&id=SB10278
- RHSA-2019:0990vendor-advisory
- openSUSE-SU-2019:1450vendor-advisory
- RHSA-2019:1322vendor-advisory
- RHSA-2019:1502vendor-advisory
- RHSA-2019:2805vendor-advisory
- [oss-security] 20210720 CVE-2021-33910: Denial of service (stack exhaustion) in systemd (PID 1)mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.