PT-2020-5133 · Systemd+6 · Systemd+6

Hexiaowen · Published 2019-09-05 · Updated 2024-06-15 · CVE-2019-20386

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions systemd versions prior to 243

Description The issue is related to a memory leak in the systemd subsystem, specifically in the button open function in login/logind-button.c. This memory leak may occur when executing the udevadm trigger command. The exploitation of this issue could allow an attacker to cause a denial of service.

Recommendations For versions prior to 243, update to version 243 or later to resolve the issue. As a temporary workaround, consider restricting the use of the udevadm trigger command until a patch is available.

Fix

Memory Leak

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-401

CWE-772

Related Identifiers

ALT-PU-2019-2645

ALT-PU-2020-1301

BDU:2020-05729

CESA-2020_4007

CESA-2020_4553

CVE-2019-20386

MGASA-2020-0094

OPENSUSE-SU-2020:0208-1

OPENSUSE-SU-2020_0208-1

OPENSUSE-SU-2024:11420-1

RHSA-2020:4007

RHSA-2020:4553

RHSA-2020_4007

RHSA-2020_4553

SUSE-SU-2020:0335-1

SUSE-SU-2020:1828-1

SUSE-SU-2020:1842-1

SUSE-SU-2020_0335-1

SUSE-SU-2020_1828-1

SUSE-SU-2020_1842-1

USN-4269-1

Affected Products

Alt Linux

Astra Linux

Centos

Red Hat

Suse

Ubuntu

Systemd

References · 79

• https://github.com/systemd/systemd/commit/b2774a3ae692113e1f47a336a6c09bac9cfb49ad · Patch
• https://usn.ubuntu.com/4269-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0335-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-20386 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20386 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-20386 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1828-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZPCOMW5X6IZZXASCDD2CNW2DLF3YADC · Vendor Advisory
• https://osv.dev/vulnerability/USN-4269-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0208-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05729 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-20386 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0094 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0094.html · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/HZPCOMW5X6IZZXASCDD2CNW2DLF3YADC · Vendor Advisory