basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "246.15"
},
{
"introduced": "247"
},
{
"fixed": "247.8"
},
{
"introduced": "248"
},
{
"fixed": "248.5"
},
{
"introduced": "249"
},
{
"fixed": "249.1"
},
{
"introduced": "0"
},
{
"last_affected": "33"
},
{
"introduced": "0"
},
{
"last_affected": "34"
}
]
}