← Back

CVE-2019-20386

nvd nist
Published: Jan 21, 2020Modified: Jun 9, 2025

JSON object

Loading...
2.4
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 0.9 / Impact: 1.4
Source: NVD

Description

An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.

Affected (9)

Show all products
Systemd Project: Systemd · Canonical: Ubuntu Linux · Fedoraproject: Fedora · Opensuse: Leap · Netapp: Active Iq Unified Manager, Cloud Backup, Steelstore Cloud Integrated Storage
Systemd Project
1 product
Systemd
Canonical
1 product
Ubuntu Linux
Fedoraproject
1 product
Fedora
Opensuse
1 product
Leap
Netapp
3 products
Active Iq Unified Manager
Cloud Backup
Steelstore Cloud Integrated Storage
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Systemd
Before 243
Configuration B
5 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Ubuntu Linux
Version 19.10
Fedora
Version 30
Leap
Version 15.1
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Active Iq Unified Manager
All versions
Cloud Backup
All versions
Steelstore Cloud Integrated Storage
All versions

Related CWEs

CWE-401
Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (10)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.