systemd-libs (AlmaLinux:9) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:9 package systemd-libs, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2023-7008 — CVSS 5.9 (medium): A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when…
• CVE-2022-3821 — CVSS 5.5 (medium): An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values…
• CVE-2022-4415 — CVSS 5.5 (medium): A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the…
• CVE-2022-45873 — CVSS 5.5 (medium): systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs…
• CVE-2026-29111 — CVSS 5.5 (medium): systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with…
• CVE-2025-4598 — CVSS 4.7 (medium): A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID…