An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Systemd | Systemd_project | * | 251 (including) |
| Red Hat Enterprise Linux 8 | RedHat | systemd-0:239-68.el8_7.1 | * |
| Red Hat Enterprise Linux 8.6 Extended Update Support | RedHat | systemd-0:239-58.el8_6.13 | * |
| Red Hat Enterprise Linux 9 | RedHat | systemd-0:250-12.el9_1.1 | * |
| Red Hat Enterprise Linux 9 | RedHat | systemd-0:250-12.el9_1.1 | * |
| Systemd | Ubuntu | bionic | * |
| Systemd | Ubuntu | esm-infra/xenial | * |
| Systemd | Ubuntu | focal | * |
| Systemd | Ubuntu | jammy | * |
| Systemd | Ubuntu | trusty | * |
| Systemd | Ubuntu | trusty/esm | * |
| Systemd | Ubuntu | xenial | * |