PT-2022-24287 · Systemd+10 · Systemd+10

Yuwata · Published 2022-07-08 · Updated 2025-05-02 · CVE-2022-3821

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Systemd (affected versions not specified)

Description An off-by-one Error issue was discovered in the format timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that lead to a buffer overrun in format timespan(), resulting in a Denial of Service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-193

Related Identifiers

ALSA-2023:0100

ALSA-2023:0336

ALT-PU-2022-2566

AZL-11443

AZL-41659

CESA-2023_0100

CVE-2022-3821

DLA-3474-1

MGASA-2022-0429

OESA-2022-2099

OPENSUSE-SU-2022_3999-1

OPENSUSE-SU-2022_4056-1

OPENSUSE-SU-2024:13366-1

RHSA-2023:0100

RHSA-2023:0336

RHSA-2023_0100

RHSA-2023_0336

RHSA-2024:1105

RLSA-2023:0336

ROSA-SA-2024-2470

SUSE-SU-2022:3999-1

SUSE-SU-2022:4056-1

SUSE-SU-2022:4279-1

SUSE-SU-2022_3999-1

SUSE-SU-2022_4056-1

SUSE-SU-2022_4279-1

SUSE-SU-2023:1776-1

SUSE-SU-2025:20041-1

USN-5928-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Systemd

Ubuntu

References · 80

• 🔥 https://github.com/systemd/systemd/issues/23928 · Exploit
• https://github.com/systemd/systemd/pull/23933 · Patch
• https://github.com/systemd/systemd/commit/9102c625a673a3246d7e73d8737f3494446bad4e · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2024:13366-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20041-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-3821 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-3821 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-41659 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:0100 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-3821 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2023-0100.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3821 · Security Note
• https://osv.dev/vulnerability/DLA-3474-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4056-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-3821 · Vendor Advisory