Search for packages
| purl | pkg:deb/debian/systemd@252.39-1~deb12u1 |
| Next non-vulnerable version | 254.26-1~bpo12+1 |
| Latest non-vulnerable version | 260.1-1 |
| Risk | 3.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4eyp-2xve-qugd
Aliases: CVE-2026-40226 |
In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-4n47-ffax-sbdu
Aliases: CVE-2026-4105 |
systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-fp54-ff23-vbb5
Aliases: CVE-2026-29111 |
systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-hwg6-vaus-cfa2
Aliases: CVE-2026-40225 |
In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-552s-n3yf-fkgq | systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes |
CVE-2023-7008
|
| VCID-66sa-bc5p-jqde | Multiple vulnerabilities have been discovered in Dnsmasq, the worst of which could lead to a denial of service. |
CVE-2023-50387
|
| VCID-86qy-wkqz-5qam | systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump |
CVE-2025-4598
|
| VCID-cgv9-wdwy-5qfu | Multiple vulnerabilities have been found in systemd, the worst of which could result in a Denial of Service condition. |
CVE-2020-13529
|
| VCID-vprj-j7u6-zbe7 | Multiple vulnerabilities have been discovered in Dnsmasq, the worst of which could lead to a denial of service. |
CVE-2023-50868
|