Vulnerability identifier: #VU55034

Vulnerability risk: Low

CVSSv3.1:

CVE-ID: CVE-2021-33910

CWE-ID:

Exploitation vector: Local

Exploit availability:

Vulnerable software:
systemd
Server applications / Other server solutions

Vendor: Freedesktop.org

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to stack exhaustion within the basic/unit-name.c in systemd. A local user can crash the systemd (PID 1) and cause a kernel panic.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

systemd: 220 - 249

---

Fixed software versions

CPE

• cpe:2.3:a:freedesktop_org:systemd:248.4:*:*:*:*:*:*:*

External links
http://www.openwall.com/lists/oss-security/2021/07/20/2
http://github.com/systemd/systemd/pull/20256/commits/441e0115646d54f080e5c3bb0ba477c892861ab9

---

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?