CVE-2022-4415: systemd_project systemd
CVSS: 5.5v3.1MediumModified
AliasesMGASA-2023-0217SUSE-SU-2022:4627-1SUSE-SU-2022:4629-1SUSE-SU-2022:4630-1SUSE-SU-2023:0058-1SUSE-SU-2023:0201-1RHSA-2023:0837UBUNTU-CVE-2022-4415DEBIAN-CVE-2022-4415openSUSE-SU-2024:12576-1
Published 11-01-2023Last modified 03-11-2025
Vulnerability summary
CVE-2022-4415 is a medium (CVSS 5.5) vulnerability in systemd_project systemd. EPSS estimates a 0.80% chance of exploitation in the next 30 days, higher than 55.7% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)EPSS score
0.80%
0%100%
Low · -0.07 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github
Advisory lineage
Upstream 0 · Downstream 5 · Related 3Timeline
- 11-01-2023PublishedVulnerability first disclosed.
- 03-11-2025Last modifiedVulnerability information updated.
Description
A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.
CVSS metrics
5 scores · 5 sources · 1 versionMedium 5.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NSourcesAll 5 agree
- OSV · Red hatEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS trend
Probability
0.80%
Chance of exploitation in the next 30 days
Percentile
56%
Versus all other CVEs
30-day change
-0.07 pp
From 0.87% on 19-09-2026
19-09-202619-10-2026
EPSS score0.80%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundSystemd
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Suse17 products
- systemd&distro=SUSE Enterprise Storage 7.1< 246.16-150300.7.57.1
- systemd&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS< 246.16-150300.7.57.1
- systemd&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 246.16-150300.7.57.1
- systemd&distro=SUSE Linux Enterprise Micro 5.1< 246.16-150300.7.57.1
- systemd&distro=SUSE Linux Enterprise Micro 5.2< 246.16-150300.7.57.1
Redhat16 products
- systemd< 0:239-68.el8_7.4
- systemd-container< 0:239-68.el8_7.4
- systemd-container-debuginfo< 0:239-68.el8_7.4
- systemd-debuginfo< 0:239-68.el8_7.4
- systemd-debugsource< 0:239-68.el8_7.4
Opensuse5 products
- systemd&distro=openSUSE Leap 15.3< 246.16-150300.7.57.1
- systemd&distro=openSUSE Leap 15.4< 249.12-150400.8.16.1 | < 246.16-150300.7.57.1 | < 249.14-150400.8.19.1
- systemd&distro=openSUSE Leap Micro 5.2< 246.16-150300.7.57.1
- systemd&distro=openSUSE Leap Micro 5.3< 249.12-150400.8.16.1 | < 249.14-150400.8.19.1
- systemd&distro=openSUSE Tumbleweed< 252.3-2.1
Debian1 product
- systemd< 252.4-1
Mageia1 product
- systemd< 246.16-4.mga8
Systemd_project1 product
- systemd≥ 246, < 253
Ubuntu1 product
- systemdAll versions (No fix recorded) | < 245.4-4ubuntu3.20 | < 249.11-0ubuntu3.7
7 vendors · 42 products
References
32 links- github.com/systemd/systemd/commit/b7641425659243c09473cd8fb3aef2c0d4a3eb9cExploitPatchThird Party Advisory
