This update for systemd fixes the following issues :

Security issues fixed :

CVE-2019-3842: Fixed a privilege escalation in pam_systemd which could be exploited by a local user (bsc#1132348).

CVE-2019-6454: Fixed a denial of service via crafted D-Bus message (bsc#1125352).

CVE-2019-3843, CVE-2019-3844: Fixed a privilege escalation where services with DynamicUser could gain new privileges or create SUID/SGID binaries (bsc#1133506, bsc#1133509).

Non-security issued fixed: logind: fix killing of scopes (bsc#1125604)

namespace: make MountFlags=shared work again (bsc#1124122)

rules: load drivers only on 'add' events (bsc#1126056)

sysctl: Don't pass null directive argument to '%s' (bsc#1121563)

systemd-coredump: generate a stack trace of all core dumps and log into the journal (jsc#SLE-5933)

udevd: notify when max number value of children is reached only once per batch of events (bsc#1132400)

sd-bus: bump message queue size again (bsc#1132721)

Do not automatically online memory on s390x (bsc#1127557)

Removed sg.conf (bsc#1036463)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - systemd: memory leak in journald-server.c introduced by     fix for CVE-2018-16864 (CVE-2019-3815)

  - systemd: Insufficient input validation in     bus_process_object() resulting in PID 1 crash     (CVE-2019-6454)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for systemd fixes the following issues :

CVE-2019-6454: Overlong DBUS messages could be used to crash systemd (bsc#1125352)

units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333)

logind: fix bad error propagation

login: log session state 'closing' (as well as New/Removed)

logind: fix borked r check

login: don't remove all devices from PID1 when only one was removed

login: we only allow opening character devices

login: correct comment in session_device_free()

login: remember that fds received from PID1 need to be removed eventually

login: fix FDNAME in call to sd_pid_notify_with_fds()

logind: fd 0 is a valid fd

logind: rework sd_eviocrevoke()

logind: check file is device node before using .st_rdev

logind: use the new FDSTOREREMOVE=1 sd_notify() message (bsc#1124153)

core: add a new sd_notify() message for removing fds from the FD store again

logind: make sure we don't trip up on half-initialized session devices (bsc#1123727)

fd-util: accept that kcmp might fail with EPERM/EACCES

core: Fix use after free case in load_from_path() (bsc#1121563)

core: include Found state in device dumps

device: fix serialization and deserialization of DeviceFound

fix path in btrfs rule (#6844)

assemble multidevice btrfs volumes without external tools (#6607) (bsc#1117025)

Update systemd-system.conf.xml (bsc#1122000)

units: inform user that the default target is started after exiting from rescue or emergency mode

core: free lines after reading them (bsc#1123892)

sd-bus: if we receive an invalid dbus message, ignore and proceeed

automount: don't pass non-blocking pipe to kernel.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Chris Coulson discovered a flaw in systemd leading to denial of service. An unprivileged user could take advantage of this issue to crash PID1 by sending a specially crafted D-Bus message on the system bus.

For Debian 8 'Jessie', this problem has been fixed in version 215-17+deb8u10.

We recommend that you upgrade your systemd packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0457 advisory.

    The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include     redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH)     are installed using a special build of Red Hat Enterprise Linux with only the packages required to host     virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and     performing administrative tasks.

    The following packages have been upgraded to a later upstream version: redhat-release-virtualization-host     (4.2), redhat-virtualization-host (4.2). (BZ#1678629, BZ#1679414)

    Security Fix(es):

    * spice: Off-by-one error in array access in spice/server/memslot.c (CVE-2019-3813)

    * systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash (CVE-2019-6454)

    * vdsm: privilege escalation to root via systemd_run (CVE-2019-3831)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for systemd fixes the following issues :

Security issues fixed :

CVE-2018-6954: Fixed a vulnerability in the symlink handling of systemd-tmpfiles which allowed a local user to obtain ownership of arbitrary files (bsc#1080919).

CVE-2019-3842: Fixed a vulnerability in pam_systemd which allowed a local user to escalate privileges (bsc#1132348).

CVE-2019-6454: Fixed a denial of service caused by long dbus messages (bsc#1125352).

Non-security issues fixed: systemd-coredump: generate a stack trace of all core dumps (jsc#SLE-5933)

udevd: notify when max number value of children is reached only once per batch of events (bsc#1132400)

sd-bus: bump message queue size again (bsc#1132721)

core: only watch processes when it's really necessary (bsc#955942 bsc#1128657)

rules: load drivers only on 'add' events (bsc#1126056)

sysctl: Don't pass null directive argument to '%s' (bsc#1121563)

Do not automatically online memory on s390x (bsc#1127557)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201903-07 (systemd: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in systemd. Please review       the CVE identifiers referenced below for details.
  Impact :

    An attacker could cause a Denial of Service condition or possibly       execute arbitrary code.
  Workaround :

    There is no known workaround at this time.

It was found that bus_process_object() in bus-objects.c allocates a buffer on the stack large enough to temporarily store the object path specified in the incoming message. A malicious unprivileged local user to send a message which results in the stack pointer moving outside of the bounds of the currently mapped stack region, jumping over the stack guard pages. A specifically crafted DBUS nessage could crash PID 1 and result in a subsequent kernel panic.(CVE-2019-6454)

This update for systemd fixes the following issues :

Security vulnerability fixed :

CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS message on the system bus by an unprivileged user (bsc#1125352)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0368 advisory.

    [219-62.0.4]
    - do not create utmp update symlinks for reboot and poweroff [Orabug: 27854896]
    - OL7 udev rule for virtio net standby interface [Orabug: 28826743]
    - fix _netdev is missing for iscsi entry in /etc/fstab [Orabug: 25897792] (tony.l.lam@oracle.com)
    - set 'RemoveIPC=no' in logind.conf as default for OL7.2 [22224874]
    - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469]
    - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475]

    [219-62.5]
    - sd-bus: if we receive an invalid dbus message, ignore and proceeed (#1667871)

    [219-62.4]
    - Refuse dbus message paths longer than BUS_PATH_SIZE_MAX limit. (#1667870)
    - Allocate temporary strings to hold dbus paths on the heap (#1667870)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for systemd fixes the following issues :

Security vulnerability fixed :

CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS message on the system bus by an unprivileged user (bsc#1125352)

Other bug fixes and changes: journal-remote: set a limit on the number of fields in a message

journal-remote: verify entry length from header

journald: set a limit on the number of fields (1k)

journald: do not store the iovec entry for process commandline on stack

core: include Found state in device dumps

device: fix serialization and deserialization of DeviceFound

fix path in btrfs rule (#6844)

assemble multidevice btrfs volumes without external tools (#6607) (bsc#1117025)

Update systemd-system.conf.xml (bsc#1122000)

units: inform user that the default target is started after exiting from rescue or emergency mode

manager: don't skip sigchld handler for main and control pid for services (#3738)

core: Add helper functions unit_{main, control}_pid

manager: Fixing a debug printf formatting mistake (#3640)

manager: Only invoke a single sigchld per unit within a cleanup cycle (bsc#1117382)

core: update invoke_sigchld_event() to handle NULL ->sigchld_event()

sd-event: expose the event loop iteration counter via sd_event_get_iteration() (#3631)

unit: rework a bit how we keep the service fdstore from being destroyed during service restart (bsc#1122344)

core: when restarting services, don't close fds

cryptsetup: Add dependency on loopback setup to generated units

journal-gateway: use localStorage['cursor'] only when it has valid value

journal-gateway: explicitly declare local variables

analyze: actually select longest activated-time of services

sd-bus: fix implicit downcast of bitfield reported by LGTM

core: free lines after reading them (bsc#1123892)

pam_systemd: reword message about not creating a session (bsc#1111498)

pam_systemd: suppress LOG_DEBUG log messages if debugging is off (bsc#1111498)

main: improve RLIMIT_NOFILE handling (#5795) (bsc#1120658)

sd-bus: if we receive an invalid dbus message, ignore and proceeed

automount: don't pass non-blocking pipe to kernel.

units: make sure initrd-cleanup.service terminates before switching to rootfs (bsc#1123333)

units: add Wants=initrd-cleanup.service to initrd-switch-root.target (#4345) (bsc#1123333)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for systemd fixes the following issues :

  - CVE-2019-6454: Overlong DBUS messages could be used to     crash systemd (bsc#1125352)

  - units: make sure initrd-cleanup.service terminates     before switching to rootfs (bsc#1123333)

  - logind: fix bad error propagation

  - login: log session state 'closing' (as well as     New/Removed)

  - logind: fix borked r check

  - login: don't remove all devices from PID1 when only one     was removed

  - login: we only allow opening character devices

  - login: correct comment in session_device_free()

  - login: remember that fds received from PID1 need to be     removed eventually

  - login: fix FDNAME in call to sd_pid_notify_with_fds()

  - logind: fd 0 is a valid fd

  - logind: rework sd_eviocrevoke()

  - logind: check file is device node before using .st_rdev

  - logind: use the new FDSTOREREMOVE=1 sd_notify() message     (bsc#1124153)

  - core: add a new sd_notify() message for removing fds     from the FD store again

  - logind: make sure we don't trip up on half-initialized     session devices (bsc#1123727)

  - fd-util: accept that kcmp might fail with EPERM/EACCES

  - core: Fix use after free case in load_from_path()     (bsc#1121563)

  - core: include Found state in device dumps

  - device: fix serialization and deserialization of     DeviceFound

  - fix path in btrfs rule (#6844)

  - assemble multidevice btrfs volumes without external     tools (#6607) (bsc#1117025)

  - Update systemd-system.conf.xml (bsc#1122000)

  - units: inform user that the default target is started     after exiting from rescue or emergency mode

  - core: free lines after reading them (bsc#1123892)

  - sd-bus: if we receive an invalid dbus message, ignore     and proceeed

  - automount: don't pass non-blocking pipe to kernel. This     update was imported from the SUSE:SLE-15:Update update     project.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0990 advisory.

    The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and     LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for     starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups.
    In addition, it supports snapshotting and restoring of the system state, maintains mount and automount     points, and implements an elaborate transactional dependency-based service control logic. It can also work     as a drop-in replacement for sysvinit.

    Security Fix(es):

    * systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash (CVE-2019-6454)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * [PATCH] bus-socket: Fix line_begins() to accept word matching full (BZ#1693578)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1322 advisory.

    The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and     LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for     starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups.
    In addition, it supports snapshotting and restoring of the system state, maintains mount and automount     points, and implements an elaborate transactional dependency-based service control logic. It can also work     as a drop-in replacement for sysvinit.

    Security Fix(es):

    * systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash (CVE-2019-6454)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * systemd segfaults running test case https://github.com/systemd/systemd-fedora-ci/tree/master/issue-1981     (BZ#1711872)

    * Race between systemctl start (and likely others) vs systemctl daemon-reload (BZ#1711875)

    * systemd doesn't delete stub unit files created for session scopes (BZ#1711876)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for systemd fixes the following issues :

Security issues fixed :

  - CVE-2018-6954: Fixed a vulnerability in the symlink     handling of systemd-tmpfiles which allowed a local user     to obtain ownership of arbitrary files (bsc#1080919).

  - CVE-2019-3842: Fixed a vulnerability in pam_systemd     which allowed a local user to escalate privileges     (bsc#1132348).

  - CVE-2019-6454: Fixed a denial of service caused by long     dbus messages (bsc#1125352).

Non-security issues fixed :

  - systemd-coredump: generate a stack trace of all core     dumps (jsc#SLE-5933)

  - udevd: notify when max number value of children is     reached only once per batch of events (bsc#1132400)

  - sd-bus: bump message queue size again (bsc#1132721)

  - core: only watch processes when it's really necessary     (bsc#955942 bsc#1128657)

  - rules: load drivers only on 'add' events (bsc#1126056)

  - sysctl: Don't pass null directive argument to '%s'     (bsc#1121563)

  - Do not automatically online memory on s390x     (bsc#1127557)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
126736	SUSE SLED15 / SLES15 Security Update : systemd (SUSE-SU-2019:1364-2)	Nessus	SuSE Local Security Checks	2019/7/16	2021/1/13	high
123602	EulerOS 2.0 SP2 : systemd (EulerOS-SA-2019-1128)	Nessus	Huawei Local Security Checks	2019/4/2	2024/6/6	medium
122312	SUSE SLED15 / SLES15 Security Update : systemd (SUSE-SU-2019:0426-1)	Nessus	SuSE Local Security Checks	2019/2/19	2024/6/19	medium
122319	Debian DLA-1684-1 : systemd security update	Nessus	Debian Local Security Checks	2019/2/20	2024/6/19	medium
122737	RHEL 7 : redhat-virtualization-host (RHSA-2019:0457)	Nessus	Red Hat Local Security Checks	2019/3/11	2024/11/6	high
125244	SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2019:1265-1)	Nessus	SuSE Local Security Checks	2019/5/17	2024/5/22	high
122735	GLSA-201903-07 : systemd: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2019/3/11	2020/2/5	high
122261	Amazon Linux 2 : systemd (ALAS-2019-1164)	Nessus	Amazon Linux Local Security Checks	2019/2/19	2024/6/20	medium
122311	SUSE SLES12 Security Update : systemd (SUSE-SU-2019:0425-1)	Nessus	SuSE Local Security Checks	2019/2/19	2024/6/19	medium
122325	Oracle Linux 7 : systemd (ELSA-2019-0368)	Nessus	Oracle Linux Local Security Checks	2019/2/20	2024/11/1	medium
122340	SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2019:0428-1)	Nessus	SuSE Local Security Checks	2019/2/20	2024/6/19	medium
122496	openSUSE Security Update : systemd (openSUSE-2019-255)	Nessus	SuSE Local Security Checks	2019/2/28	2024/6/18	medium
124672	RHEL 8 : systemd (RHSA-2019:0990)	Nessus	Red Hat Local Security Checks	2019/5/7	2024/11/6	medium
125712	RHEL 7 : systemd (RHSA-2019:1322)	Nessus	Red Hat Local Security Checks	2019/6/5	2024/11/6	medium
125453	openSUSE Security Update : systemd (openSUSE-2019-1450)	Nessus	SuSE Local Security Checks	2019/5/28	2024/5/20	high
125537	SUSE SLED15 / SLES15 Security Update : systemd (SUSE-SU-2019:1364-1)	Nessus	SuSE Local Security Checks	2019/5/29	2021/1/13	high

检测

插件搜索

high

medium

medium

medium

high

high

high

medium

medium

medium

medium

medium

medium

medium

high

high