The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0497 advisory.

    This advisory aggregates security fixes for the systemd SRPM in CIQ LTS 9.2. It addresses 12 CVEs:
    CVE-2025-4598, CVE-2018-15688, CVE-2019-6454, CVE-2018-16865, CVE-2018-15687, and 7 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0049 advisory.

    The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and     LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for     starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups.
    In addition, it supports snapshotting and restoring of the system state, maintains mount and automount     points, and implements an elaborate transactional dependency-based service control logic. It can also work     as a drop-in replacement for sysvinit.

    Security Fix(es):

    * systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling (CVE-2018-15688)

    * systemd: stack overflow when calling syslog from a command with long cmdline (CVE-2018-16864)

    * systemd: stack overflow when receiving many journald entries (CVE-2018-16865)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Red Hat would like to thank Ubuntu Security Team for reporting CVE-2018-15688 and Qualys Research Labs for     reporting CVE-2018-16864 and CVE-2018-16865. Upstream acknowledges Felix Wilhelm (Google) as the original     reporter of CVE-2018-15688.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for systemd fixes the following issues :

Fix security vulnerabilities CVE-2018-16864 and CVE-2018-16865 (bsc#1120323): Both issues were memory corruptions via attacker-controlled alloca which could have been used to gain root privileges by a local attacker.

Fix security vulnerability CVE-2018-15686 (bsc#1113665): A vulnerability in unit_deserialize of systemd used to allow an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This could have been used to improperly influence systemd execution and possibly lead to root privilege escalation.

Remedy 2048 character line-length limit in systemd-sysctl code that would cause parser failures if /etc/sysctl.conf contained lines that exceeded this length (bsc#1071558).

Fix a bug in systemd's core timer code that would cause timer looping under certain conditions, resulting in hundreds of syslog messages being written to the journal (bsc#1068588).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for systemd provides the following fixes :

Security issues fixed :

  - CVE-2018-16864, CVE-2018-16865: Fixed two memory     corruptions through attacker-controlled alloca()s     (bsc#1120323)

  - CVE-2018-16866: Fixed an information leak in journald     (bsc#1120323)

  - Fixed an issue during system startup in relation to     encrypted swap disks (bsc#1119971)

Non-security issues fixed :

  - core: Queue loading transient units after setting their     properties. (bsc#1115518)

  - logind: Stop managing VT switches if no sessions are     registered on that VT. (bsc#1101591)

  - terminal-util: introduce vt_release() and vt_restore()     helpers.

  - terminal: Unify code for resetting kbd utf8 mode a bit.

  - terminal Reset should honour default_utf8 kernel     setting.

  - logind: Make session_restore_vt() static.

  - udev: Downgrade message when settting inotify watch up     fails. (bsc#1005023)

  - log: Never log into foreign fd #2 in PID 1 or its     pre-execve() children. (bsc#1114981)

  - udev: Ignore the exit code of systemd-detect-virt for     memory hot-add. In SLE-12-SP3, 80-hotplug-cpu-mem.rules     has a memory hot-add rule that uses systemd-detect-virt     to detect non-zvm environment. The systemd-detect-virt     returns exit failure code when it detected _none_ state.
    The exit failure code causes that the hot-add memory     block can not be set to online. (bsc#1076696)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for systemd provides the following fixes :

Security issues fixed :

  - CVE-2018-16864, CVE-2018-16865: Fixed two memory     corruptions through attacker-controlled alloca()s     (bsc#1120323)

  - CVE-2018-16866: Fixed an information leak in journald     (bsc#1120323)

  - CVE-2018-6954: Fix mishandling of symlinks present in     non-terminal path components (bsc#1080919)

  - Fixed an issue during system startup in relation to     encrypted swap disks (bsc#1119971)

Non-security issues fixed :

  - pam_systemd: Fix 'Cannot create session: Already running     in a session' (bsc#1111498)

  - systemd-vconsole-setup: vconsole setup fails, fonts will     not be copied to tty (bsc#1114933)

  - systemd-tmpfiles-setup: symlinked /tmp to /var/tmp     breaking multiple units (bsc#1045723)

  - Fixed installation issue with /etc/machine-id during     update (bsc#1117063)

  - btrfs: qgroups are assigned to parent qgroups after     reboot (bsc#1093753)

  - logind: Stop managing VT switches if no sessions are     registered on that VT. (bsc#1101591)

  - udev: Downgrade message when settting inotify watch up     fails. (bsc#1005023)

  - udev: Ignore the exit code of systemd-detect-virt for     memory hot-add. In SLE-12-SP3, 80-hotplug-cpu-mem.rules     has a memory hot-add rule that uses systemd-detect-virt     to detect non-zvm environment. The systemd-detect-virt     returns exit failure code when it detected _none_ state.
    The exit failure code causes that the hot-add memory     block can not be set to online. (bsc#1076696) This     update was imported from the SUSE:SLE-15:Update update     project.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0271 advisory.

    The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and     LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for     starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups.
    In addition, it supports snapshotting and restoring of the system state, maintains mount and automount     points, and implements an elaborate transactional dependency-based service control logic. It can also work     as a drop-in replacement for sysvinit.

    Security Fix(es):

    * systemd: stack overflow when calling syslog from a command with long cmdline (CVE-2018-16864)

    * systemd: stack overflow when receiving many journald entries (CVE-2018-16865)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Red Hat would like to thank Qualys Research Labs for reporting these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - systemd: Out-of-bounds heap write in systemd-networkd     dhcpv6 option handling (CVE-2018-15688)

  - systemd: stack overflow when calling syslog from a     command with long cmdline (CVE-2018-16864)

  - systemd: stack overflow when receiving many journald     entries (CVE-2018-16865)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for systemd is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes using Linux cgroups. In addition, it supports snapshotting and restoring of the system state, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. It can also work as a drop-in replacement for sysvinit.

Security Fix(es) :

* systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling (CVE-2018-15688)

* systemd: stack overflow when calling syslog from a command with long cmdline (CVE-2018-16864)

* systemd: stack overflow when receiving many journald entries (CVE-2018-16865)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank Ubuntu Security Team for reporting CVE-2018-15688 and Qualys Research Labs for reporting CVE-2018-16864 and CVE-2018-16865. Upstream acknowledges Felix Wilhelm (Google) as the original reporter of CVE-2018-15688.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
355266	Rocky Linux 9.2 [CIQ] Security Update: systemd / systemd-boot-unsigned / systemd-boot-unsigned-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0497)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	medium
121173	RHEL 7 : systemd (RHSA-2019:0049)	Nessus	Red Hat Local Security Checks	2019/1/15	2024/11/7	high
121060	SUSE SLES12 Security Update : systemd (SUSE-SU-2019:0053-1)	Nessus	SuSE Local Security Checks	2019/1/10	2024/6/27	high
121061	SUSE SLES12 Security Update : systemd (SUSE-SU-2019:0054-1)	Nessus	SuSE Local Security Checks	2019/1/10	2024/6/27	high
121463	openSUSE Security Update : systemd (openSUSE-2019-97)	Nessus	SuSE Local Security Checks	2019/1/30	2024/6/25	high
121464	openSUSE Security Update : systemd (openSUSE-2019-98)	Nessus	SuSE Local Security Checks	2019/1/30	2024/6/25	high
121587	RHEL 7 : systemd (RHSA-2019:0271)	Nessus	Red Hat Local Security Checks	2019/2/5	2024/11/7	high
122387	EulerOS 2.0 SP2 : systemd (EulerOS-SA-2019-1060)	Nessus	Huawei Local Security Checks	2019/2/22	2022/2/1	high
121192	CentOS 7 : systemd (CESA-2019:0049)	Nessus	CentOS Local Security Checks	2019/1/16	2022/2/1	high

検出

プラグインの検索

medium

high

high

high

high

high

high

high

high