systemd-devel (AlmaLinux:8) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package systemd-devel, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2022-2526 — CVSS 9.8 (critical): A use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io() function and dns_stream_complete()…
• CVE-2023-26604 — CVSS 7.8 (high): systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in…
• CVE-2023-7008 — CVSS 5.9 (medium): A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when…
• CVE-2022-3821 — CVSS 5.5 (medium): An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values…
• CVE-2022-4415 — CVSS 5.5 (medium): A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the…