Red Hat Security AdvisoryRHSA-2020:0575
systemd security and bug fix update
Released 2020-02-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) systemd-239-18.el8_1.4, systemd-container-239-18.el8_1.4, systemd-devel-239-18.el8_1.4 +5
Fixes 1 record
Priority LOW 36
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00456 · Published 2020-03-31 · Fixed in v245-rc1 CWE-416