CVE-2019-20386

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 21-01-2020 07:15

Last modified: - 28-01-2022 10:27

Total changes: - 3

Description

An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Low

Attack complexity

Physical

Attack vector

Low

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

2.4

Base score

0.9

1.4

Exploitability score

Impact score

Verification logic

vendor=systemd_project AND product=systemd AND versionEndExcluding=243

vendor=canonical AND product=ubuntu_linux AND version=16.04 AND software_edition=esm

vendor=canonical AND product=ubuntu_linux AND version=18.04 AND software_edition=lts

vendor=canonical AND product=ubuntu_linux AND version=19.10

vendor=fedoraproject AND product=fedora AND version=30

vendor=opensuse AND product=leap AND version=15.1

vendor=netapp AND product=active_iq_unified_manager AND version=- AND target_software=vmware_vsphere

vendor=netapp AND product=cloud_backup AND version=-

vendor=netapp AND product=steelstore_cloud_integrated_storage AND version=-

Reference

https://github.com/systemd/systemd/commit/b2774a3ae692113e1f47a336a6c09bac9cfb49ad
https://security.netapp.com/advisory/ntap-20200210-0002/
openSUSE-SU-2020:0208-Third Party Advisory
USN-4269-1-Third Party Advisory
FEDORA-2020-f8e267d6d0-Third Party Advisory

Keywords

CVE-2019-20386

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2019-20386

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures