https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:38:28 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:2463 <p><strong>Affected:</strong> AlmaLinux:9: rhel-net-naming-sysattrs, AlmaLinux:9: systemd, AlmaLinux:9: systemd-boot-unsigned, AlmaLinux:9: systemd-container, AlmaLinux:9: systemd-devel, AlmaLinux:9: systemd-journal-remote, AlmaLinux:9: systemd-libs, AlmaLinux:9: systemd-oomd, AlmaLinux:9: systemd-pam, AlmaLinux:9: systemd-resolved and 2 more</p> <p>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.</p> <p>Security Fix(es):</p> <p>* systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: rhel-net-naming-sysattrs, AlmaLinux:9: systemd, AlmaLinux:9: systemd-boot-unsigned, AlmaLinux:9: systemd-container, AlmaLinux:9: systemd-devel, AlmaLinux:9: systemd-journal-remote, AlmaLinux:9: systemd-libs, AlmaLinux:9: systemd-oomd, AlmaLinux:9: systemd-pam, AlmaLinux:9: systemd-resolved and 2 more</p> <p>The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.</p> <p>Security Fix(es):</p> <p>* systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes (CVE-2023-7008)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:2463 https://cve.radiocsirt.org/vuln/bdu:2024-00853 bdu:2024-00853 https://cve.radiocsirt.org/vuln/bdu:2024-00853 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0720 certfr-2024-avi-0720 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0720 https://cve.radiocsirt.org/vuln/euvd-2026-260282 EUVD-2026-260282 https://cve.radiocsirt.org/vuln/euvd-2026-260282 https://cve.radiocsirt.org/vuln/fkie_cve-2023-7008 <p>A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.</p> <p>A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-7008 https://cve.radiocsirt.org/vuln/ghsa-hwxf-wjq7-j3hm <p>A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.</p> <p>A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.</p> https://cve.radiocsirt.org/vuln/ghsa-hwxf-wjq7-j3hm https://cve.radiocsirt.org/vuln/gsd-2023-7008 gsd-2023-7008 https://cve.radiocsirt.org/vuln/gsd-2023-7008 https://cve.radiocsirt.org/vuln/icsa-23-166-11 <p>json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability. A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS. When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM inst…</p> <p>json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend. A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability. A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS. When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference. A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM inst…</p> https://cve.radiocsirt.org/vuln/icsa-23-166-11 https://cve.radiocsirt.org/vuln/msrc_cve-2023-7008 msrc_CVE-2023-7008 https://cve.radiocsirt.org/vuln/msrc_cve-2023-7008 https://cve.radiocsirt.org/vuln/oesa-2024-1020 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: systemd, openEuler:20.03-LTS-SP3: systemd, openEuler:20.03-LTS-SP4: systemd, openEuler:22.03-LTS: systemd, openEuler:22.03-LTS-SP1: systemd, openEuler:22.03-LTS-SP2: systemd</p> <p>systemd is a system and service manager that runs as PID 1 and starts the rest of the system. Security Fix(es): A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.(CVE-2023-7008)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: systemd, openEuler:20.03-LTS-SP3: systemd, openEuler:20.03-LTS-SP4: systemd, openEuler:22.03-LTS: systemd, openEuler:22.03-LTS-SP1: systemd, openEuler:22.03-LTS-SP2: systemd</p> <p>systemd is a system and service manager that runs as PID 1 and starts the rest of the system. Security Fix(es): A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.(CVE-2023-7008)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1020 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13665-1 <p>libsystemd0-254.8-4.1 on GA media</p> <p>libsystemd0-254.8-4.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13665-1 https://cve.radiocsirt.org/vuln/suse-su-2024:3149-1 <p>Security update for systemd</p> <p>Security update for systemd</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3149-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-7008 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: systemd, Ubuntu:Pro:16.04:LTS: systemd, Ubuntu:Pro:18.04:LTS: systemd, Ubuntu:Pro:20.04:LTS: systemd, Ubuntu:22.04:LTS: systemd</p> <p>A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: systemd, Ubuntu:Pro:16.04:LTS: systemd, Ubuntu:Pro:18.04:LTS: systemd, Ubuntu:Pro:20.04:LTS: systemd, Ubuntu:22.04:LTS: systemd</p> <p>A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-7008 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1751 <p>Ein entfernter Angreifer kann eine Schwachstelle in systemd ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter Angreifer kann eine Schwachstelle in systemd ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1751