CVE-2019-20386

systemd: memory leak in button_open() in login/logind-button.c when udev events are received

Loading…

Severity

Low

Red Hat Product Security

2.4

CVSS 3.1

Review impact separately from score.

Published · January 22, 2020

Updated · November 21, 2025

Description

A memory leak was discovered in the systemd-login when a power-switch event is received. A physical attacker may trigger one of these events and leak bytes due to a missing free.

Statement

The version of systemd delivered in OpenShift Container Platform 4.1 and included in CoreOS images has been superseded by the version delivered in Red Hat Enterprise Linux 8. CoreOS updates for systemd in will be consumed from Red Hat Enterprise Linux 8 channels.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 2.4
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-400 · Uncontrolled Resource Consumption