An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00014.html | Third Party Advisory |
https://github.com/systemd/systemd/commit/b2774a3ae692113e1f47a336a6c09bac9cfb49ad | Patch Third Party Advisory |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZPCOMW5X6IZZXASCDD2CNW2DLF3YADC/ | |
https://security.netapp.com/advisory/ntap-20200210-0002/ | Third Party Advisory |
https://usn.ubuntu.com/4269-1/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
28 Jan 2022, 21:27
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-401 | |
References | (UBUNTU) https://usn.ubuntu.com/4269-1/ - Third Party Advisory | |
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZPCOMW5X6IZZXASCDD2CNW2DLF3YADC/ - Third Party Advisory | |
References | (CONFIRM) https://security.netapp.com/advisory/ntap-20200210-0002/ - Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00014.html - Third Party Advisory | |
CPE | cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* |
Information
Published : 2020-01-21 06:15
Updated : 2024-02-04 20:39
NVD link : CVE-2019-20386
Mitre link : CVE-2019-20386
CVE.ORG link : CVE-2019-20386
JSON object : View
Products Affected
systemd_project
- systemd
canonical
- ubuntu_linux
netapp
- active_iq_unified_manager
- cloud_backup
- steelstore_cloud_integrated_storage
opensuse
- leap
fedoraproject
- fedora
CWE
CWE-401
Missing Release of Memory after Effective Lifetime