CVE-2019-20386: Medium severity systemd vulnerability
An issue was discovered in buttonopen in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-20386?
CVE-2019-20386 is a vulnerability discovered in systemd, allowing a memory leak to occur when executing the udevadm trigger command.
What is the severity of CVE-2019-20386?
CVE-2019-20386 has a severity value of 2.4, which is considered low.
Which software versions are affected by CVE-2019-20386?
CVE-2019-20386 affects systemd versions up to and excluding 243, as well as specific versions of Ubuntu, Fedora, openSUSE Leap, Apple iPadOS, Netapp Active IQ Unified Manager, Netapp Cloud Backup, and Netapp Steelstore Cloud Integrated Storage.
How can I fix CVE-2019-20386 on Ubuntu?
To fix CVE-2019-20386 on Ubuntu, update the systemd package to version 243-5 or later.
Where can I find more information about CVE-2019-20386?
More information about CVE-2019-20386 can be found at the following links: [OpenSUSE Security Announce](http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00014.html), [GitHub Commit](https://github.com/systemd/systemd/commit/b2774a3ae692113e1f47a336a6c09bac9cfb49ad), [Fedora Project Mailing List](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZPCOMW5X6IZZXASCDD2CNW2DLF3YADC/).