Log in Start free

Vulnerability · Published Mar 31, 2020 · Assigned by redhat

CVE-2020-1712

High 7.8

In plain English

A high-severity use-after-free in systemd from [UNKNOWN]. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.5%top 60.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12systemd244.2-1DEBIAN-CVE-2020-1712
Debian:13systemd244.2-1DEBIAN-CVE-2020-1712
Debian:14systemd244.2-1DEBIAN-CVE-2020-1712

Affected products (as reported)

VendorProductVersions
[UNKNOWN] systemd before v245-rc1

Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References