CVE-2019-6454

21

FAUCET Score

CVE-2019-6454 describes a denial-of-service vulnerability in systemd versions 239 and earlier, affecting various Linux distributions and products including Canonical, Debian, Fedora, and Red Hat. An unprivileged local user can exploit a stack buffer overflow in the sd-bus component by sending a specially crafted D-Bus message to PID1. This can cause systemd to crash and trigger a kernel panic, leading to system unavailability. The vulnerability has a CVSS score of 5.5 (Medium) with low attack complexity and local access required, resulting in high availability impact. There is no known active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, though it has garnered some community discussion and media coverage.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		239CPE matchmatch criteria	cpe:2.3:a:systemd_project:systemd:239:::::::*
		15.0CPE matchmatch criteria	cpe:2.3:o:opensuse:leap:15.0:::::::*
		Range not provided by sourceCPE matchmatch criteria	cpe:2.3:a:netapp:active_iq_performance_analytics_services:-:::::::*
		8.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:8.0:::::::*
		9.0CPE matchmatch criteria	cpe:2.3:o:debian:debian_linux:9.0:::::::*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

2.04%

Probability of exploitation in next 30 days

EPSS Percentile

79.1%

Percentile rank of EPSS score among Peer Group

As of 2026-07-25

Model: v2026.06.15

This CVE's current EPSS score of 0.0204 is in the 99th percentile among its peer group of 15,937 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (15)

github_advisorypatch availablevia nvd_reference

microsoftpatch availablevia msrc

Product: CBL Mariner 1.0 ARMFixed in: 239-34

microsoftpatch availablevia msrc

Product: cm1 systemd 239-34 on CBL Mariner 1.0Fixed in: -

microsoftpatch availablevia msrc

Product: 17047-16820Fixed in: -

microsoftpatch availablevia msrc

Product: CBL Mariner 1.0 x64Fixed in: 239-34

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.4 Extended Update SupportFixed in: systemd-0:219-42.el7_4.16

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.5 Extended Update SupportFixed in: systemd-0:219-57.el7_5.6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: systemd-0:239-13.el8_0.3

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Fixed in: redhat-release-virtualization-host-0:4.2-8.3.el7

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Fixed in: redhat-virtualization-host-0:4.2-20190219.0.el7_6

redhatpatch availablevia redhat_api

Product: Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Fixed in: rhvm-appliance-0:4.2-20190224.0.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: systemd-0:219-62.el7_6.5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.3 Advanced Update SupportFixed in: systemd-0:219-30.el7_3.14

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.3 Telco Extended Update SupportFixed in: systemd-0:219-30.el7_3.14

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7.3 Update Services for SAP SolutionsFixed in: systemd-0:219-30.el7_3.14

Vendor Advisories (3)

microsoft2020-Aug/CVE-2019-6454

CVE-2019-6454

microsoft2019-Mar/CVE-2019-6454Moderate

An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1 causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).

redhatCVE-2019-6454Important

systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash

References

lists.opensuse.org / opensuse-security-announce/2019-02/msg00070.html

Third Party Advisory

lists.opensuse.org / opensuse-security-announce/2019-05/msg00062.html

Mailing ListThird Party Advisory

access.redhat.com / errata/RHSA-2019:0368

Third Party Advisory

access.redhat.com / errata/RHSA-2019:0990

Third Party Advisory

access.redhat.com / errata/RHSA-2019:1322

Third Party Advisory

access.redhat.com / errata/RHSA-2019:1502

Third Party Advisory

access.redhat.com / errata/RHSA-2019:2805

Third Party Advisory

github.com / systemd/systemd/commits/master/src/libsystemd/sd-bus/bus-objects.c

PatchThird Party Advisory

kc.mcafee.com / corporate/index

PatchThird Party Advisory

lists.debian.org / debian-lts-announce/2019/02/msg00031.html

Mailing ListThird Party Advisory

lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/N67IOBOTDOMVNQJ5QRU2MXLEECXPGNVJ

security.netapp.com / advisory/ntap-20190327-0004

Third Party Advisory

usn.ubuntu.com / 3891-1

Third Party Advisory

debian.org / security/2019/dsa-4393

Third Party Advisory

openwall.com / lists/oss-security/2019/02/18/3

Mailing ListPatchThird Party Advisory

openwall.com / lists/oss-security/2019/02/19/1

Mailing ListThird Party Advisory

openwall.com / lists/oss-security/2021/07/20/2

ExploitMailing ListThird Party Advisory

securityfocus.com / bid/107081

Third Party AdvisoryVDB Entry