systemd (SUSE:Linux Enterprise Server 12 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12 SP5 package systemd, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2020-1712 — CVSS 7.8 (high): A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while…
• CVE-2023-26604 — CVSS 7.8 (high): systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in…
• CVE-2021-33910 — CVSS 5.5 (medium): basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving…
• CVE-2022-3821 — CVSS 5.5 (medium): An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values…
• CVE-2022-4415 — CVSS 5.5 (medium): A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the…
• CVE-2019-20386 — CVSS 2.4 (low): An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory…