CVE-2020-1712

תיאור (מקור, אנגלית)

A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.

מדדים

CVSS 3.1

7.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-14/10/2026

CWE

CWE-416

מוצרים מושפעים

systemd_project: systemd; redhat: ceph storage; redhat: discovery; redhat: migration toolkit; redhat: openshift container platform; redhat: enterprise linux; debian: debian linux

קישורים

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1712 Issue TrackingPatchThird Party Advisory
• https://github.com/systemd/systemd/commit/1068447e6954dc6ce52f099ed174c442cb89‮… PatchThird Party Advisory
• https://github.com/systemd/systemd/commit/637486261528e8aa3da9f26a4487dc254f4b‮… PatchThird Party Advisory
• https://github.com/systemd/systemd/commit/bc130b6858327b382b07b3985cf48e2aa901‮… PatchThird Party Advisory
• https://github.com/systemd/systemd/commit/ea0d0ede03c6f18dbc5036c5e9cccf97e415‮… PatchThird Party Advisory
• https://www.openwall.com/lists/oss-security/2020/02/05/1 Mailing ListPatchThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1712 Issue TrackingPatchThird Party Advisory
• https://github.com/systemd/systemd/commit/1068447e6954dc6ce52f099ed174c442cb89‮… PatchThird Party Advisory
• https://github.com/systemd/systemd/commit/637486261528e8aa3da9f26a4487dc254f4b‮… PatchThird Party Advisory
• https://github.com/systemd/systemd/commit/bc130b6858327b382b07b3985cf48e2aa901‮… PatchThird Party Advisory