Skip to main content

Off-by-one Error

CVE-2022-3821

Medium
5.5/10

Summary

An off-by-one Error issue was discovered in Systemd in "format_timespan()" function of "time-util.c". An attacker could supply specific values for time and accuracy that leads to buffer overrun in "format_timespan()", leading to a Denial of Service. This issue affects versions prior to 252-rc1.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • HIGH

CWE-193 - Off-by-one Error

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

References

Advisory Timeline

  • Published