Read the docs
TI-2019-04521 Aliases CVE-2019-6454GHSA-8h89-jj6w-g26p

An issue was discovered in sd-bus in systemd 239.

Priority LOW 29CWE-787Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).

Why it matters now

EPSS 0.02035 81st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 7 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 53

CPEVersionsRoleVendor
cpe:2.3:a:systemd_project:systemd:239:*:*:*:*:*:*:*239Vulnerablesystemd
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*15.0VulnerableopenSUSE
cpe:2.3:a:netapp:active_iq_performance_analytics_services:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*29VulnerableFedoraproject
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*18.10VulnerableCanonical
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
  • cpe:2.3:a:systemd_project:systemd:239:*:*:*:*:*:*:* Versions 239 Vulnerable ·systemd
  • cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:* Versions 15.0 Vulnerable ·openSUSE
  • cpe:2.3:a:netapp:active_iq_performance_analytics_services:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* Versions 29 Vulnerable ·Fedoraproject
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:* Versions 18.10 Vulnerable ·Canonical
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
Show 43 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*8.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.1:*:*:*:*:*:*:*8.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.1:*:*:*:*:*:*:*8.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*8.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:*8.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*before 7.7.2.21; 7.8.0 to before 7.8.2.8; 8.0.0 to before 8.1.1VulnerableMcAfee
  • cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:* Versions before 7.7.2.21; 7.8.0 to before 7.8.2.8; 8.0.0 to before 8.1.1 Vulnerable ·McAfee

Remediation

Red Hat 7 advisories

  • RHSA-2019:2805 Released 2019-09-19 · Red Hat rating Important
    systemd security update
    • Red Hat Enterprise Linux Server AUS (v. 7.3) libgudev1-219-30.el7_3.14, libgudev1-devel-219-30.el7_3.14, systemd-219-30.el7_3.14 +4
    • Red Hat Enterprise Linux Server E4S (v. 7.3) libgudev1-219-30.el7_3.14, libgudev1-devel-219-30.el7_3.14, systemd-219-30.el7_3.14 +4
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.3) systemd-journal-gateway-219-30.el7_3.14, systemd-networkd-219-30.el7_3.14, systemd-resolved-219-30.el7_3.14
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.3) systemd-journal-gateway-219-30.el7_3.14, systemd-networkd-219-30.el7_3.14, systemd-resolved-219-30.el7_3.14
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.3) systemd-journal-gateway-219-30.el7_3.14, systemd-networkd-219-30.el7_3.14, systemd-resolved-219-30.el7_3.14
    • Red Hat Enterprise Linux Server TUS (v. 7.3) libgudev1-219-30.el7_3.14, libgudev1-devel-219-30.el7_3.14, systemd-219-30.el7_3.14 +4
  • RHSA-2019:1502 Released 2019-06-18 · Red Hat rating Important
    systemd security and bug fix update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) libgudev1-219-42.el7_4.16, systemd-219-42.el7_4.16, systemd-libs-219-42.el7_4.16 +2
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) libgudev1-devel-219-42.el7_4.16, systemd-devel-219-42.el7_4.16, systemd-journal-gateway-219-42.el7_4.16 +2
    • Red Hat Enterprise Linux Server EUS (v. 7.4) libgudev1-219-42.el7_4.16, libgudev1-219-42.el7_4.16.ppc, libgudev1-devel-219-42.el7_4.16 +8
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.4) systemd-journal-gateway-219-42.el7_4.16, systemd-networkd-219-42.el7_4.16, systemd-resolved-219-42.el7_4.16 +1
  • RHSA-2019:1322 Released 2019-06-04 · Red Hat rating Important
    systemd security and bug fix update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) libgudev1-219-57.el7_5.6, systemd-219-57.el7_5.6, systemd-libs-219-57.el7_5.6 +2
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) libgudev1-devel-219-57.el7_5.6, systemd-devel-219-57.el7_5.6, systemd-journal-gateway-219-57.el7_5.6 +2
    • Red Hat Enterprise Linux Server EUS (v. 7.5) libgudev1-219-57.el7_5.6, libgudev1-219-57.el7_5.6.ppc, libgudev1-devel-219-57.el7_5.6 +8
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.5) systemd-journal-gateway-219-57.el7_5.6, systemd-networkd-219-57.el7_5.6, systemd-resolved-219-57.el7_5.6 +1
Show 4 more Red Hat advisories
  • RHSA-2019:0990 Released 2019-05-07 · Red Hat rating Moderate
    systemd security and bug fix update
    • Red Hat Enterprise Linux BaseOS (v. 8) systemd-239-13.el8_0.3, systemd-container-239-13.el8_0.3, systemd-devel-239-13.el8_0.3 +5
  • RHSA-2019:0461 Released 2019-03-05 · Red Hat rating Moderate
    rhvm-appliance security update
    • Red Hat Virtualization 4 Hypervisor for RHEL 7 rhvm-appliance-2:4.2-20190224.0.el7
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts rhvm-appliance-2:4.2-20190224.0.el7
  • RHSA-2019:0457 Released 2019-03-05 · Red Hat rating Important
    redhat-virtualization-host security update
    • RHEL 7-based RHEV-H for RHEV 4 (build requirements) redhat-release-virtualization-host-4.2-8.3.el7, redhat-virtualization-host-image-update-placeholder-4.2-8.3.el7
    • Red Hat Virtualization 4 Hypervisor for RHEL 7 redhat-virtualization-host-4.2-20190219.0.el7_6, redhat-virtualization-host-image-update-4.2-20190219.0.el7_6
  • RHSA-2019:0368 Released 2019-02-19 · Red Hat rating Important
    systemd security update
    • Red Hat Enterprise Linux Client (v. 7) libgudev1-219-62.el7_6.5, systemd-219-62.el7_6.5, systemd-libs-219-62.el7_6.5 +2
    • Red Hat Enterprise Linux Client Optional (v. 7) libgudev1-devel-219-62.el7_6.5, systemd-devel-219-62.el7_6.5, systemd-journal-gateway-219-62.el7_6.5 +2
    • Red Hat Enterprise Linux ComputeNode (v. 7) libgudev1-219-62.el7_6.5, systemd-219-62.el7_6.5, systemd-libs-219-62.el7_6.5 +2
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) libgudev1-devel-219-62.el7_6.5, systemd-devel-219-62.el7_6.5, systemd-journal-gateway-219-62.el7_6.5 +2
    • Red Hat Enterprise Linux Server (v. 7) libgudev1-219-62.el7_6.5, libgudev1-219-62.el7_6.5.ppc, libgudev1-devel-219-62.el7_6.5 +8
    • Red Hat Enterprise Linux Server Optional (v. 7) systemd-journal-gateway-219-62.el7_6.5, systemd-networkd-219-62.el7_6.5, systemd-resolved-219-62.el7_6.5 +1
    • Red Hat Enterprise Linux Workstation (v. 7) libgudev1-219-62.el7_6.5, libgudev1-devel-219-62.el7_6.5, systemd-219-62.el7_6.5 +4
    • Red Hat Enterprise Linux Workstation Optional (v. 7) systemd-journal-gateway-219-62.el7_6.5, systemd-networkd-219-62.el7_6.5, systemd-resolved-219-62.el7_6.5
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libgudev1-219-62.el7_6.5, libgudev1-devel-219-62.el7_6.5, systemd-219-62.el7_6.5 +4
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) systemd-journal-gateway-219-62.el7_6.5, systemd-networkd-219-62.el7_6.5, systemd-resolved-219-62.el7_6.5

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
RHEL 7-based RHEV-H for RHEV 4 (build requirements)Fixed RHSA-2019:0457
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2019:0990
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2019:0368
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2019:0368
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2019:0368
Red Hat Enterprise Linux ComputeNode EUS (v. 7.4)Fixed RHSA-2019:1502
Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)Fixed RHSA-2019:1322
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2019:0368
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4)Fixed RHSA-2019:1502
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5)Fixed RHSA-2019:1322
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2019:0368
Red Hat Enterprise Linux Server AUS (v. 7.3)Fixed RHSA-2019:2805
Red Hat Enterprise Linux Server E4S (v. 7.3)Fixed RHSA-2019:2805
Red Hat Enterprise Linux Server EUS (v. 7.4)Fixed RHSA-2019:1502
Red Hat Enterprise Linux Server EUS (v. 7.5)Fixed RHSA-2019:1322
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2019:0368
Red Hat Enterprise Linux Server Optional AUS (v. 7.3)Fixed RHSA-2019:2805
Red Hat Enterprise Linux Server Optional E4S (v. 7.3)Fixed RHSA-2019:2805
Red Hat Enterprise Linux Server Optional EUS (v. 7.4)Fixed RHSA-2019:1502
Red Hat Enterprise Linux Server Optional EUS (v. 7.5)Fixed RHSA-2019:1322
Red Hat Enterprise Linux Server Optional TUS (v. 7.3)Fixed RHSA-2019:2805
Red Hat Enterprise Linux Server TUS (v. 7.3)Fixed RHSA-2019:2805
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2019:0368
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2019:0368
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2019:0368
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2019:0368
Red Hat Virtualization 4 Hypervisor for RHEL 7Fixed RHSA-2019:0457, RHSA-2019:0461
Red Hat Virtualization 4 Management Agent for RHEL 7 HostsFixed RHSA-2019:0461

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-6454
  2. 2026-10-03 Alias added: GHSA-8h89-jj6w-g26p

References

Exploit 1

Patch 3

Advisory 13

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences