Systemd

Every one of the 49 is a mark on the map. Named now: 1 to 26, most at risk first.

1. In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small. A malicious DNS server can exploit this via…CVE-2017-9445Systemd Project · 59% likely

   CWE-787

2. In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() functio…CVE-2017-15908Systemd Project · 24% likely

   CWE-835

3. systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.CVE-2017-9217Systemd Project · 16% likely

   CWE-476

4. basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled…CVE-2021-33910Systemd Project · CVSS 5.5 · 8.8% likely

   CWE-770

5. Integer overflow in the valid_user_field function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service (crash) and possibly execute arbitra…CVE-2013-4391Systemd Project · 5.4% likely

   CWE-190

6. Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd.CVE-2015-7510Systemd Project · 4.3% likely

   CWE-119

7. systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with root privileges rather than the user int…CVE-2017-1000082Systemd Project · 3.9% likely

   CWE-269

8. systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent, and there is no hostname vali…CVE-2018-21029Systemd Project · 3.1% likely

   CWE-295

9. An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the jo…CVE-2018-16865The systemd Project · CVSS 7.5 · 3.0% likely

   CWE-770

10. systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and…CVE-2018-20839Systemd Project · 2.5% likely
11. systemd: reexec state injection: fgets() on overlong lines leads to line splittingCVE-2018-15686systemd · CVSS 7 · 2.3% likely

    CWE-502

12. An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the obje…CVE-2019-6454Systemd Project · 2.0% likely

    CWE-787

13. Out-of-Bounds write in systemd-networkd dhcpv6 option handlingCVE-2018-15688systemd · CVSS 8.8 · 1.8% likely

    CWE-120

14. An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a D…CVE-2020-13529Systemd Project · CVSS 6.1 · 1.4% likely

    CWE-290

15. A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd timers features, allowing local attackers to escalate their pr…CVE-2016-10156Systemd Project · 1.2% likely

    CWE-264

16. In systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the environment before using the XDG_SEAT variable. It is possible for an attacker, in so…CVE-2019-3842The systemd Project · CVSS 4.5 · 1.2% likely

    CWE-285

17. systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protected_hardlinks sysctl is turned off, which allows l…CVE-2017-18078Systemd Project · 1.1% likely

    CWE-59

18. systemd: chown_one() can dereference symlinksCVE-2018-15687systemd · CVSS 7.8 · 1.1% likely

    CWE-362

19. systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be…CVE-2023-26604Systemd Project · CVSS 7.8 · 1.1% likely

    CWE-269

20. An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process…CVE-2018-16866The systemd Project · CVSS 4.3 · 1.1% likely

    CWE-125

21. The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which cau…CVE-2016-7796Systemd Project · 0.9% likely

    CWE-20

22. A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.CVE-2022-4415Systemd Project · CVSS 5.5 · 0.8% likely

    CWE-200

23. An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command lin…CVE-2018-16864The systemd Project · CVSS 7.4 · 0.7% likely

    CWE-770

24. The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message…CVE-2016-7795Systemd Project · 0.6% likely

    CWE-20

25. systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors in…CVE-2018-6954Systemd Project · CVSS 7.8 · 0.5% likely

    CWE-59

26. In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, w…CVE-2019-15718Systemd Project · 0.5% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.