The managerdispatchnotify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "209"
},
{
"introduced": "0"
},
{
"last_affected": "213"
},
{
"introduced": "0"
},
{
"last_affected": "214"
},
{
"introduced": "0"
},
{
"last_affected": "229"
}
]
}[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.0-sp1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12-sp1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.0-sp1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "7.0"
}
]
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-7796.json"