Medium ALAS2-2020-1388 1 CVE

Moderate: systemd security update (Amazon Linux 2)

Published Feb 3, 2020 · Updated Feb 8, 2020

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-1712: No description is available for this CVE. 1794578: CVE-2020-1712 systemd: use-after-free when asynchronous polkit queries are performed

Fixed packages 11

Release	Package	Fixed in
Amazon Linux · 2	libgudev1	0:219-57.amzn2.0.12
Amazon Linux · 2	libgudev1-devel	0:219-57.amzn2.0.12
Amazon Linux · 2	systemd	0:219-57.amzn2.0.12
Amazon Linux · 2	systemd-debuginfo	0:219-57.amzn2.0.12
Amazon Linux · 2	systemd-devel	0:219-57.amzn2.0.12
Amazon Linux · 2	systemd-journal-gateway	0:219-57.amzn2.0.12
Amazon Linux · 2	systemd-libs	0:219-57.amzn2.0.12
Amazon Linux · 2	systemd-networkd	0:219-57.amzn2.0.12
Amazon Linux · 2	systemd-python	0:219-57.amzn2.0.12
Amazon Linux · 2	systemd-resolved	0:219-57.amzn2.0.12
Amazon Linux · 2	systemd-sysv	0:219-57.amzn2.0.12

Vulnerabilities 1

High 7.8

CVE-2020-1712 Public exploit

A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are…

[UNKNOWN] systemd systemd systemd Debian Ubuntu

Mar 31, 2020

References

web
https://alas.aws.amazon.com/cve/html/CVE-2020-1712.html