Description
A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- fedoraproject / fedora34 – 34
- fedoraproject / fedora35 – 35
- RedHat / enterprise_linux7.0 – 7.0
- RedHat / enterprise_linux8.0 – 8.0
- RedHat / enterprise_linux9.0 – 9.0
- systemd_project / systemd240 – 250.2
References
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2024639
- MAILING_LISThttps://www.openwall.com/lists/oss-security/2022/01/10/2
- PATCHhttps://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2021-3997
- MISChttps://security.gentoo.org/glsa/202305-15
Updated 16m ago · 8 sources