Product by Systemd Project
Systemd
55 known vulnerabilities in Systemd (Systemd Project), 0 of them actively exploited (CISA KEV).
Key figures
55
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2017-9445 | Systemd: security vulnerability | 7.5 | |
| Critical | CVE-2015-7510 | Systemd: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2017-1000082 | Systemd: security vulnerability | 9.8 | |
| High | CVE-2017-15908 | Systemd: Infinite Loop | 7.5 | |
| High | CVE-2017-9217 | Systemd: Denial of Service | 7.5 | |
| Critical | CVE-2018-21029 | Systemd: security vulnerability | 9.8 | |
| Medium | CVE-2018-1049 | Red Hat Systemd: Race Condition | 5.9 | |
| Medium | CVE-2021-33910 | Systemd: security vulnerability | 5.5 | |
| High | CVE-2018-16865 | The systemd Project Systemd: Allocation of Resources Without Limits or Throttling | 7.5 | |
| High | CVE-2018-15688 | Out-of-Bounds write in systemd-networkd dhcpv6 option handling | 8.8 | |
| Critical | CVE-2022-2526 | Systemd-resolved: Use After Free | 9.8 | |
| High | CVE-2018-15686 | systemd: reexec state injection: fgets() on overlong lines leads to line splitting | 7.0 | |
| Medium | CVE-2025-4598 | Systemd-coredump: Signal Handler Race Condition | 4.7 | |
| Medium | CVE-2019-6454 | Systemd: Denial of Service | 5.5 | |
| Medium | CVE-2018-20839 | Systemd: security vulnerability | 4.3 | |
| Medium | CVE-2021-3997 | Systemd: Uncontrolled Recursion | 5.5 | |
| High | CVE-2016-10156 | Systemd: security vulnerability | 7.8 | |
| High | CVE-2023-26604 | Systemd: Privilege Escalation | 7.8 | |
| Medium | CVE-2020-13529 | Systemd: Authentication Bypass by Spoofing | 6.1 | |
| High | CVE-2017-18078 | Systemd: security vulnerability | 7.8 | |
| High | CVE-2018-15687 | systemd: chown_one() can dereference symlinks | 7.8 | |
| Not rated | CVE-2013-4391 | Systemd: Heap-Based Buffer Overflow | — | |
| Medium | CVE-2023-7008 | Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes | 5.9 | |
| High | CVE-2018-16864 | The systemd Project Systemd: Allocation of Resources Without Limits or Throttling | 7.4 | |
| High | CVE-2019-3842 | The systemd Project Systemd: Improper Authorization | 4.5 |