CVE-2022-3821: Fedoraproject Fedora

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.

Affected products

• Fedoraproject Fedora: version 35 only
• Red Hat Enterprise Linux: version 8.0 only; version 9.0 only
• Systemd Project Systemd: up to and including 251

Published 2022-11-08. Last modified 2026-06-17.