CVE-2020-1712

Published: Mar 31, 2020Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.

Affected (7)

Products: Systemd Project: Systemd · Redhat: Ceph Storage, Discovery, Enterprise Linux, Migration Toolkit, Openshift Container Platform · Debian: Debian Linux

Systemd Project

1 product

5 products

Enterprise Linux

Migration Toolkit

Openshift Container Platform

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Systemd Project Systemd	Up to 244

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Redhat Ceph Storage	Version 4.0
Redhat Discovery	All versions
Redhat Enterprise Linux	Version 8.0
Redhat Migration Toolkit	Version 1.0
Redhat Openshift Container Platform	Version 4.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 9.0

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (14)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1712

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://github.com/systemd/systemd/commit/1068447e6954dc6ce52f099ed174c442cb89ed54

Source: secalert@redhat.com

PatchThird Party Advisory

https://github.com/systemd/systemd/commit/637486261528e8aa3da9f26a4487dc254f4b7abb

Source: secalert@redhat.com

PatchThird Party Advisory

https://github.com/systemd/systemd/commit/bc130b6858327b382b07b3985cf48e2aa9016b2d

Source: secalert@redhat.com

PatchThird Party Advisory

https://github.com/systemd/systemd/commit/ea0d0ede03c6f18dbc5036c5e9cccf97e415ccc2

Source: secalert@redhat.com

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/06/msg00025.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://www.openwall.com/lists/oss-security/2020/02/05/1

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1712

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://github.com/systemd/systemd/commit/1068447e6954dc6ce52f099ed174c442cb89ed54

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/systemd/systemd/commit/637486261528e8aa3da9f26a4487dc254f4b7abb

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/systemd/systemd/commit/bc130b6858327b382b07b3985cf48e2aa9016b2d

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/systemd/systemd/commit/ea0d0ede03c6f18dbc5036c5e9cccf97e415ccc2

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/06/msg00025.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://www.openwall.com/lists/oss-security/2020/02/05/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

Timeline

No history available yet.