Off-by-one in systemd - CVE-2022-3821

Vulnerability identifier: #VU69807

CSH Severity: Low

CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3821

CWE-ID: CWE-193

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an off-by-one error within the format_timespan() function in time-util.c. A local user can trigger an off-by-one error and perform a denial of service (DoS) attack.

systemd
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
systemd (Ubuntu package)
libudev1-32bit
libsystemd0
libudev-devel
libsystemd0-32bit
systemd-bash-completion
systemd-debugsource
udev
libsystemd0-debuginfo
systemd-32bit
libsystemd0-debuginfo-32bit
systemd-devel
systemd-debuginfo
libudev1-debuginfo
libudev1
systemd-debuginfo-32bit
systemd-sysvinit
libudev1-debuginfo-32bit
udev-debuginfo
systemd (Red Hat package)
systemd-pam
systemd-tests
systemd-libs
systemd-journal-remote
systemd-container
systemd-udev
systemd-help
systemd-networkd
systemd-timesyncd
systemd-resolved
systemd-udev-compat
systemd-nspawn
systemd-container-debuginfo
systemd-journal-remote-debuginfo
libsystemd0-32bit-debuginfo
systemd-coredump
systemd-coredump-debuginfo
systemd-doc
systemd-network
systemd-lang
systemd-network-debuginfo
libudev-devel-32bit
libudev1-32bit-debuginfo
nss-myhostname-32bit
nss-myhostname-32bit-debuginfo
systemd-32bit-debuginfo
nss-systemd
nss-mymachines
nss-mymachines-debuginfo
nss-resolve
nss-resolve-debuginfo
systemd-logger
nss-mymachines-32bit
nss-mymachines-32bit-debuginfo
nss-myhostname
nss-myhostname-debuginfo
nss-systemd-debuginfo
systemd-experimental
systemd-experimental-debuginfo
systemd-portable
systemd-portable-debuginfo
systemd-testsuite
systemd-testsuite-debuginfo
sys-apps/systemd-tmpfiles
sys-apps/systemd
IBM Cloud Pak for Watson AIOps
Dell EMC PowerProtect Data Protection
Dell Data Protection Central
cflinuxfs3
ObjectScale
Enterprise SONiC
Platform Automation Toolkit
IBM supplied MQ Advanced container images
Dell PowerProtect Cyber Recovery
Robotic Process Automation for Cloud Pak
VMware Tanzu Application Service for VMs
Isolation Segment
NetObserv Operator
Data Lakehouse
Service Telemetry Framework
Migration Toolkit for Virtualization
IBM Watson Assistant for IBM Cloud Pak for Data
OpenShift Logging
Netcool Operations Insight
IBM MQ Operator
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Gentoo Linux
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
Oracle Linux
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server 12 SP2 BCL
SUSE Linux Enterprise Server 12 SP4 ESPOS
SUSE Linux Enterprise Server 12 SP4 LTSS
SUSE Linux Enterprise Server
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
Ubuntu
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
openEuler
Fedora
Self Node Remediation Operator
OpenShift Service Mesh
VMware Tanzu Operations Manager
OpenShift Data Foundation (formerly OpenShift Container Storage)
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Dell EMC Container Storage Modules
HPE Moonshot 1500 Chassis Manager
Red Hat OpenShift GitOps
RecoverPoint for Virtual Machines
Cloud Pak for Security (CP4S)
Dell EMC NetWorker vProxy
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
RecoverPoint for VMs
IBM Storage Scale System
IBM CICS TX Advanced

Install updates from vendor's website.

systemd - update to 252
NetObserv Operator - update to 1.1.0
Self Node Remediation Operator - update to 0.5.1
Data Lakehouse - update to 1.1.0.0
Migration Toolkit for Containers - update to 1.7.7
Service Telemetry Framework - update to 1.5.4
Red Hat OpenShift GitOps - addressed in versions 1.5.9, 1.7, 1.10.4, 1.11.3, 1.12.0
Migration Toolkit for Virtualization - update to 2.4.3
OpenShift Service Mesh - update to 2.5.1
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
Red Hat OpenShift Container Platform - addressed in versions 4.11.59, 4.12.53, 4.15.2, 4.15.3
OpenShift Logging - update to 5.6.1
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
systemd (Ubuntu package) - addressed in versions Ubuntu Pro, 237-3ubuntu10.57, 245.4-4ubuntu3.20, 249.11-0ubuntu3.7, 251.4-1ubuntu7.1
cflinuxfs3 - update to 0.357.0
ObjectScale - update to 1.4.0
Dell EMC Container Storage Modules - update to 1.6.0
Netcool Operations Insight - update to 1.6.12
Cloud Pak for Security (CP4S) - update to 1.10.12.0
IBM MQ Operator - addressed in versions 2.0.7, 2.2.2
VMware Tanzu Operations Manager - addressed in versions 2.10.55, 3.0.6
HPE Moonshot 1500 Chassis Manager - update to 4.0-b43
Enterprise SONiC - update to 4.1.2
Dell EMC NetWorker vProxy - update to 4.3.0-40
Platform Automation Toolkit - addressed in versions 4.4.31, 5.0.24, 5.1.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.6.4
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.9.0.0
EMC ViPR SRM - update to 4.9.0.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.13.0
RecoverPoint for VMs - update to 6.0.SP1.P1
IBM Storage Scale System - addressed in versions 6.1.2.8, 6.1.9.0
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.3-r1, 9.3.1.1-r1
IBM CICS TX Advanced - update to 10.1.0.0 ifix18
Dell PowerProtect Cyber Recovery - update to 19.14.0.1
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.3, 23.0.3
libudev1-32bit - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
libsystemd0 - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
libudev-devel - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1
libsystemd0-32bit - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-bash-completion - addressed in versions 228-150.108.2, 228-157.43.2
systemd-debugsource - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
udev - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
libsystemd0-debuginfo - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-32bit - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
libsystemd0-debuginfo-32bit - addressed in versions 228-150.108.2, 228-157.43.2
systemd-devel - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-debuginfo - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
libudev1-debuginfo - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
libudev1 - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-debuginfo-32bit - addressed in versions 228-150.108.2, 228-157.43.2
systemd-sysvinit - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
libudev1-debuginfo-32bit - addressed in versions 228-150.108.2, 228-157.43.2
udev-debuginfo - addressed in versions 228-150.108.2, 228-157.43.2, 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd (Red Hat package) - addressed in versions 239-58.el8_6.13, 239-68.el8_7.1, 250-12.el9_1.1
systemd-pam - update to 239-74.0.2
systemd-tests - update to 239-74.0.2
systemd-libs - update to 239-74.0.2
systemd-journal-remote - update to 239-74.0.2
systemd-devel - update to 239-74.0.2
systemd-container - update to 239-74.0.2
systemd - update to 239-74.0.2
systemd-udev - update to 239-74.0.2
systemd-debuginfo - update to 243-58
systemd-help - update to 243-58
systemd-networkd - update to 243-58
systemd-devel - update to 243-58
systemd-timesyncd - update to 243-58
systemd - update to 243-58
systemd-debugsource - update to 243-58
systemd-container - update to 243-58
systemd-pam - update to 243-58
systemd-resolved - update to 243-58
systemd-libs - update to 243-58
systemd-udev-compat - update to 243-58
systemd-journal-remote - update to 243-58
systemd-nspawn - update to 243-58
systemd-udev - update to 243-58
systemd-container - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-container-debuginfo - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-journal-remote - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-journal-remote-debuginfo - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
libsystemd0-32bit-debuginfo - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-coredump - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-coredump-debuginfo - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-doc - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-network - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-lang - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-network-debuginfo - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
libudev-devel-32bit - update to 246.16-150300.7.54.1
libudev1-32bit-debuginfo - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
nss-myhostname-32bit - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
nss-myhostname-32bit-debuginfo - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-32bit-debuginfo - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
nss-systemd - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
nss-mymachines - update to 246.16-150300.7.54.1
nss-mymachines-debuginfo - update to 246.16-150300.7.54.1
nss-resolve - update to 246.16-150300.7.54.1
nss-resolve-debuginfo - update to 246.16-150300.7.54.1
systemd-logger - update to 246.16-150300.7.54.1
nss-mymachines-32bit - update to 246.16-150300.7.54.1
nss-mymachines-32bit-debuginfo - update to 246.16-150300.7.54.1
nss-myhostname - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
nss-myhostname-debuginfo - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
nss-systemd-debuginfo - addressed in versions 246.16-150300.7.54.1, 249.12-150400.8.13.1
systemd-experimental - update to 249.12-150400.8.13.1
systemd-experimental-debuginfo - update to 249.12-150400.8.13.1
systemd-portable - update to 249.12-150400.8.13.1
systemd-portable-debuginfo - update to 249.12-150400.8.13.1
systemd-testsuite - update to 249.12-150400.8.13.1
systemd-testsuite-debuginfo - update to 249.12-150400.8.13.1
systemd - update to 249.13-6.fc35
sys-apps/systemd-tmpfiles - update to 251.3
sys-apps/systemd - update to 251.3

• https://github.com/systemd/systemd/issues/23928
• https://github.com/systemd/systemd/commit/9102c625a673a3246d7e73d8737f3494446bad4e
• https://github.com/systemd/systemd/pull/23933
• https://bugzilla.redhat.com/show_bug.cgi?id=2139327
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RVBQC2VLSDVQAPJTEMTREXDL4HYLXG2P/

• Off-by-one in Systemd
• SUSE update for systemd
• SUSE update for systemd
• SUSE update for systemd
• Red Hat Enterprise Linux 8 update for systemd
• Multiple vulnerabilities in Oracle Linux
• Red Hat Enterprise Linux 9 update for systemd
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.5
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.7
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in NetObserv Operator
• Ubuntu update for systemd
• Multiple vulnerabilities in Cloud Foundry Foundation cflinuxfs3
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Off-by-one in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• SUSE update for systemd
• Gentoo update for systemd
• VMware Tanzu products update for systemd
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Off-by-one in IBM CICS TX Advanced
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in Dell NetWorker vProxy
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Multiple vulnerabilities in Dell Container Storage Modules
• Multiple vulnerabilities in Dell EMC SRM and Dell EMC Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Data Protection Central
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in Dell EMC Enterprise SONiC
• IBM Storage Scale System update for systemd
• Red Hat Enterprise Linux 8.6 Extended Update Support update for systemd
• openEuler update for systemd
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.11
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh Containers 2.5
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.10
• Multiple vulnerabilities in Dell Data Lakehouse System Software
• Multiple vulnerabilities in Dell ObjectScale
• Multiple vulnerabilities in HPE Moonshot 1500 Chassis Manager
• Fedora 35 update for systemd
• Multiple vulnerabilities in Dell RecoverPoint for Virtual Machines
• Anolis OS update for systemd
• Dell RecoverPoint for Virtual Machines update for third-party components