[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fC8jOBfb9hdEsQFfXiqFXAkl_xR_dtntkn_fl9NaTaYU":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":83,"topProductsByCves":84,"seoMetadata":86,"meta":95},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":19},31000,"systemd_project",1,48,0,410,"2025-05-30","s",[16],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},160729,"systemd","Systemd_project is a technology vendor with 1 tracked product and 48 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[21,30,35,40,47,53,59,67,72,77],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":29},"CVE-2017-9445","In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small. A malicious DNS server can exploit this via a response with a specially crafted TCP payload to trick systemd-resolved into allocating a buffer that's too small, and subsequently write arbitrary data beyond the end of it.","2017-06-28",7.5,"v3.1","High",false,0.54837,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":34},"CVE-2017-15908","In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dns_packet_read_type_window() function of the 'systemd-resolved' service and cause a DoS of the affected service.","2017-10-26",0.23633,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":39},"CVE-2017-9217","systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty question section.","2017-05-24",0.15301,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":26,"severity":45,"isKev":28,"epssScore":46},"CVE-2021-33910","basic\u002Funit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.","2021-07-20",5.5,"Medium",0.08792,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":26,"severity":45,"isKev":28,"epssScore":52},"CVE-2018-1049","In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted.","2018-02-16",5.9,0.07441,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":25,"cvssVersion":57,"severity":27,"isKev":28,"epssScore":58},"CVE-2013-4391","Integer overflow in the valid_user_field function in journal\u002Fjournald-native.c in systemd allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow.","2013-10-28","v2",0.05443,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":28,"epssScore":66},"CVE-2015-7510","Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd.","2017-09-25",9.8,"v3.0","Critical",0.04331,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":63,"cvssVersion":26,"severity":65,"isKev":28,"epssScore":71},"CVE-2017-1000082","systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. \"0day\"), running the service in question with root privileges rather than the user intended.","2017-07-07",0.03878,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":63,"cvssVersion":26,"severity":65,"isKev":28,"epssScore":76},"CVE-2018-21029","systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname validation does not have anything to do with this issue (i.e. there is no hostname to be sent)","2019-10-30",0.03138,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":82},"CVE-2018-16865","An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.","2019-01-11",7.8,0.03016,[],[85],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":87,"metaDescription":88,"keywords":89,"structuredData":90},"Systemd_project - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Systemd_project covering 1 product with 48 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Systemd_project vulnerabilities, Systemd_project security, Systemd_project CVE, Systemd_project threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":91,"@type":92,"name":93,"description":88,"url":94},"https:\u002F\u002Fschema.org","Organization","Systemd_project","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsystemd_project",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":96,"apiVersion":97},"2026-10-17T11:55:16.447Z","3.0"]