CVE-2021-33910Medium· 5.5▾ Sunlitbasic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system c…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 1.8 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
8.8%
basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.
systemd < 246.15systemd >= 247, < 247.8systemd >= 248, < 248.5systemd >= 249, < 249.1fedora = 33fedora = 34debian_linux = 10.0hci_management_nodesolidfireUpgrade past the affected range:
systemd 249.1Connected by shared product, vendor, weakness, or advisory.
CVE-2020-13529Medium· 6.1An exploitable denial-of-service vulnerability exists in Systemd 245
CVE-2022-3821Medium· 5.5An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c
CVE-2021-3997Medium· 5.5A flaw was found in systemd
CVE-2020-13776Medium· 6.7systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended
CVE-2020-1712High· 7.8A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages
CVE-2025-4598Medium· 4.7A vulnerability was found in systemd-coredump