Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2022:4279-1 Moderate Issue: Systemd Buffer Overrun Alert

suse
Calendar Grey November 29, 2022
Dist Suse Esm H88
Crucial SUSE patch for systemd resolves a memory overflow vulnerability; safeguards system reliability and performance.
An update that solves one vulnerability and has two fixes is now available

Summary

This update for systemd fixes the following issues: - CVE-2022-3821: Fixed buffer overrun in format_timespan() function (bsc#1204968). - Import commit 417bb0944e035969594fff83a3ab9c2ca9a56234 * 20743c1a44 logind: fix crash in logind on user-specified message string * b971b5f085 tmpfiles: check the directory we were supposed to create, not its parent * 2850271ea6 stat-util: replace is_dir() + is_dir_fd() by single is_dir_full() call * 3d3bd5fc8d systemd --user: call pam_loginuid when creating user@.service (#3120) (bsc#1198507) * 4b56c3540a parse-util: introduce pid_is_valid() * aa811a4c0c systemd-detect-virt: refine hypervisor detection (#7171) (bsc#1197244)

Topics%20covered

Topics Covered

security advisory moderate buffer overrun systemd SUSE Linux Enterprise

References

#1197244 #1198507 #1204968

Cross- CVE-2022-3821

CVSS scores:

CVE-2022-3821 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2022-3821 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products:

SUSE Linux Enterprise Server 12-SP5

SUSE Linux Enterprise Server for SAP Applications 12-SP5

SUSE Linux Enterprise Software Development Kit 12-SP5

https://www.suse.com/security/cve/CVE-2022-3821.html

https://bugzilla.suse.com/1197244

https://bugzilla.suse.com/1198507

https://bugzilla.suse.com/1204968

Announcement ID: SUSE-SU-2022:4279-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate buffer overrun systemd SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here