| Package | Affected versions | Patched versions |
|---|---|---|
| ceph storage | = 4.0 | |
| migration toolkit | = 1.0 | |
| openshift container platform | = 4.0 | |
| systemd | ≤ 244 |
A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free