Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-3821: An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libgudev1 | 0:219-78.amzn2.0.21 |
| Amazon Linux · 2 | libgudev1-devel | 0:219-78.amzn2.0.21 |
| Amazon Linux · 2 | systemd | 0:219-78.amzn2.0.21 |
| Amazon Linux · 2 | systemd-debuginfo | 0:219-78.amzn2.0.21 |
| Amazon Linux · 2 | systemd-devel | 0:219-78.amzn2.0.21 |
| Amazon Linux · 2 | systemd-journal-gateway | 0:219-78.amzn2.0.21 |
| Amazon Linux · 2 | systemd-libs | 0:219-78.amzn2.0.21 |
| Amazon Linux · 2 | systemd-networkd | 0:219-78.amzn2.0.21 |
| Amazon Linux · 2 | systemd-python | 0:219-78.amzn2.0.21 |
| Amazon Linux · 2 | systemd-resolved | 0:219-78.amzn2.0.21 |
| Amazon Linux · 2 | systemd-sysv | 0:219-78.amzn2.0.21 |
Vulnerabilities 1
-
Medium 5.5
An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could sup…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-3821.html