CVE-2022-3821: Buffer Overflow
An off-by-one Error issue was discovered in Systemd in formattimespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in formattimespan(), leading to a Denial of Service.
Other sources
systemd is vulnerable to a denial of service, caused by an off-by-one error in formattimespan() function of time-util.c. By sending specific values for time and accuracy, a local attacker could exploit this vulnerability to cause a denial of service.
— IBM
Systemd: The formattimespan function in time-util.c triggers buffer overrun with crafted time values. Supplying specific values for time and accuracy leads to buffer overrun in formattimespan, leading to Denial of Service.
References: https://github.com/systemd/systemd/issues/23928 https://github.com/systemd/systemd/pull/23933 https://github.com/systemd/systemd/commit/9102c625a673a3246d7e73d8737f3494446bad4e
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/systemdto a version that resolves this vulnerability.Fixed in 251 - Upgrade
Upgrade
redhat/systemdto a version that resolves this vulnerability.Fixed in 252 - Upgrade
Upgrade
debian/systemdto a version that resolves this vulnerability.Fixed in 252.39-1~deb12u2Fixed in 252.38-1~deb12u1Fixed in 257.13-1~deb13u1Fixed in 262-1Fixed in 262.1-1 - Upgrade
Upgrade
debian/systemdto a version that resolves this vulnerability.Fixed in 251.3-1
Event History
Frequently Asked Questions
What is CVE-2022-3821?
CVE-2022-3821 is an off-by-one Error issue discovered in Systemd in the format_timespan() function of time-util.c.
What is the severity of CVE-2022-3821?
The severity of CVE-2022-3821 is medium with a CVSS score of 5.5.
How does CVE-2022-3821 affect Systemd?
CVE-2022-3821 affects Systemd versions up to and including 251.
How can an attacker exploit CVE-2022-3821?
An attacker can exploit CVE-2022-3821 by supplying specific values for time and accuracy that lead to a buffer overrun in the format_timespan() function, leading to a Denial of Service.
Where can I find more information about CVE-2022-3821?
You can find more information about CVE-2022-3821 on the following references: [1] https://bugzilla.redhat.com/show_bug.cgi?id=2139327 [2] https://github.com/systemd/systemd/commit/9102c625a673a3246d7e73d8737f3494446bad4e [3] https://github.com/systemd/systemd/issues/23928