Fluid Attacks Database

Description

A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	systemd	=247.3-6 \|\| =247.3-7 \|\| =247.3-7+deb11u1 \|\| >=0 <247.3-7+deb11u2	247.3-7+deb11u2
debian 12	systemd	>=0 <252.4-1	252.4-1
debian 13	systemd	>=0 <252.4-1	252.4-1
debian 14	systemd	>=0 <252.4-1	252.4-1
rpm rhel8	systemd	<0:239-68.el8_7.4	0:239-68.el8_7.4
rpm rhel7	NetworkManager	-	-
rpm rhel8.6	systemd	<0:239-58.el8_6.13	0:239-58.el8_6.13
rpm rhel9	systemd	<0:250-12.el9_1.3	0:250-12.el9_1.3
rpm rhel7	systemd	-	-

Aliases

1. CVE-2022-44152. NVD-2022-44153. OSV-DEBIAN-2022-44154. OSV-2022-44155. SECURITY-TRACKER-CVE-2022-4415

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.