What’s Vulnerable › Vulnerabilities
CVE-2019-6454
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-03-21 · updated 2026-06-17
- Weakness: CWE-787
Description
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
Affected products
- Canonical Ubuntu Linux: 16.04, 18.04, 18.10
- Debian Linux: 8.0, 9.0
- Fedoraproject Fedora: 29
- McAfee Web Gateway (MWG): before 7.7.2.21; from 7.8.0 before 7.8.2.8; from 8.0.0 before 8.1.1 — fixed in 7.7.2.21, 7.8.2.8, 8.1.1
- NetApp Active Iq Performance Analytics Services: all versions
- openSUSE Leap: 15.0
- Red Hat Enterprise Linux: 8.0
- RedHat Enterprise Linux Compute Node Eus: 7.5
- RedHat Enterprise Linux Desktop: 7.0
- RedHat Enterprise Linux Eus: 7.4, 7.5, 8.1, 8.2, 8.4
- RedHat Enterprise Linux For Ibm Z Systems Eus: 7.4, 7.5, 8.1, 8.2, 8.4
- RedHat Enterprise Linux For Power Big Endian Eus: 7.4
- RedHat Enterprise Linux For Power Little Endian: 8.0
- RedHat Enterprise Linux For Power Little Endian Eus: 7.4, 7.5, 8.1, 8.2, 8.4
- RedHat Enterprise Linux Server: 7.0
- RedHat Enterprise Linux Server Aus: 7.3, 7.4, 7.6, 8.2, 8.4
- RedHat Enterprise Linux Server Eus: 7.6
- RedHat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions: 7.3, 7.4, 8.0, 8.1, 8.2
- RedHat Enterprise Linux Server Tus: 7.3, 7.4, 7.6, 8.2, 8.4
- RedHat Enterprise Linux Server Update Services For Sap Solutions: 7.3, 7.4, 8.0, 8.1, 8.2
- RedHat Enterprise Linux Workstation: 7.0
- systemd: 239
How to fix
Upgrade to a fixed version: McAfee Web Gateway (MWG) 7.7.2.21, 7.8.2.8, 8.1.1. Check the vendor advisory for mitigations.
References
- http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00070.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00062.html
- http://www.openwall.com/lists/oss-security/2019/02/18/3
- http://www.openwall.com/lists/oss-security/2019/02/19/1
- http://www.openwall.com/lists/oss-security/2021/07/20/2
- http://www.securityfocus.com/bid/107081
- https://access.redhat.com/errata/RHSA-2019:0368
- https://access.redhat.com/errata/RHSA-2019:0990
- https://access.redhat.com/errata/RHSA-2019:1322
- https://access.redhat.com/errata/RHSA-2019:1502
- https://access.redhat.com/errata/RHSA-2019:2805
- https://github.com/systemd/systemd/commits/master/src/libsystemd/sd-bus/bus-objects.c
Get alerted when CVE-2019-6454 or the next vulnerability affects your stack