CVE-2019-6454

Name of the Vulnerable Software and Affected Versions systemd versions prior to 241-alt2

Description A buffer overflow vulnerability exists in the bus process object() function within systemd. An unprivileged local user can exploit this flaw by sending a specially crafted D-Bus message to PID1, potentially causing a denial of service (systemd PID1 crash and kernel panic). The vulnerability stems from insufficient input validation when handling the path field of a D-Bus message, leading to a stack buffer overflow.

Recommendations Update systemd to version 241-alt2 or later.