Low
Security advisory
An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-20386
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:06 UTC · Revision 1
Source evidence
An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.
osv:CVE-2019-20386
Complete source record
{
"id": "e42341e19b63f508f0249f079a4d2dd03ef3f3f316c83c9c82c36f2d04715c0b",
"url": "https://osv.dev/vulnerability/CVE-2019-20386",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-20386",
"summary": "An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.",
"evidence": "osv:CVE-2019-20386",
"products": [],
"severity": "low",
"structured": {
"id": "CVE-2019-20386",
"aliases": [
"CVE-2019-20386"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/systemd/systemd",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "efb536d0cbe2e58f80e501d19999928c75e08f6a"
},
{
"fixed": "b2774a3ae692113e1f47a336a6c09bac9cfb49ad"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "243"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "b2774a3ae692113e1f47a336a6c09bac9cfb49ad"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"v242",
"v242-rc4",
"v242-rc3",
"v242-rc2",
"v242-rc1",
"v241",
"v241-rc2",
"v241-rc1",
"v240",
"v239",
"v238",
"v237",
"v236",
"v235",
"v234",
"v233",
"v232",
"v231",
"v230",
"v229",
"v228",
"v227",
"v226",
"v225",
"v224",
"v223",
"v222",
"v221",
"v219",
"v220",
"v218",
"v217",
"v216",
"v215",
"v214",
"v213",
"v212",
"v211",
"v210",
"v209",
"v208",
"v207",
"v206",
"v205",
"v204",
"v203",
"v202",
"v201",
"v200",
"v199",
"v198",
"v197",
"v196",
"v195",
"v194",
"v193",
"v192",
"v191",
"v190",
"v189",
"v188",
"v187",
"v186",
"v185",
"v184",
"v183",
"v44",
"v43",
"v42",
"v41",
"v40",
"v39",
"v38",
"v37",
"v36",
"v35",
"v34",
"v33",
"v32",
"v31",
"v30",
"v29",
"v28",
"v27",
"v26",
"v25",
"v24",
"v23",
"v22",
"v21",
"v20",
"v19",
"v18",
"v17",
"v16",
"v15",
"v14",
"v13",
"v12",
"v11",
"v10",
"v9",
"v8",
"v7",
"v6",
"v5",
"v4",
"v3",
"v2",
"v1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-20386.json",
"vanir_signatures": [
{
"id": "CVE-2019-20386-e1c63b0d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"326564156687685457686675009472426897656",
"334726468006479082837075670701216667366",
"149982500711301232111486991874294451745"
]
},
"source": "https://github.com/systemd/systemd/commit/b2774a3ae692113e1f47a336a6c09bac9cfb49ad",
"target": {
"file": "src/login/logind-button.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2019-20386-e790f4ce",
"digest": {
"length": 1174,
"function_hash": "221635536567374423042881625390525494909"
},
"source": "https://github.com/systemd/systemd/commit/b2774a3ae692113e1f47a336a6c09bac9cfb49ad",
"target": {
"file": "src/login/logind-button.c",
"function": "button_open"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:07:05Z"
}
},
{
"ranges": [
{
"repo": "https://github.com/systemd/systemd-stable",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "efb536d0cbe2e58f80e501d19999928c75e08f6a"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "243"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v243-rc2",
"v243-rc1",
"v242",
"v242-rc4",
"v242-rc3",
"v242-rc2",
"v242-rc1",
"v241",
"v241-rc2",
"v241-rc1",
"v240",
"v239",
"v238",
"v237",
"v236",
"v235",
"v234",
"v233",
"v232",
"v231",
"v230",
"v229",
"v228",
"v227",
"v226",
"v225",
"v224",
"v223",
"v222",
"v221",
"v219",
"v220",
"v218",
"v217",
"v216",
"v215",
"v214",
"v213",
"v212",
"v211",
"v210",
"v208",
"v209",
"v201",
"v204",
"v207",
"v206",
"v205",
"v203",
"v202",
"v200",
"v199",
"v198",
"v197",
"v196",
"systemd-v196",
"v195",
"systemd-v195",
"v194",
"systemd-v194",
"v193",
"systemd-v193",
"v192",
"systemd-v192",
"v191",
"systemd-v191",
"v190",
"systemd-v190",
"v189",
"systemd-v189",
"v188",
"systemd-v188",
"v187",
"systemd-v187",
"v186",
"systemd-v186",
"v185",
"systemd-v185",
"v184",
"systemd-v184",
"v183",
"systemd-v183",
"v44",
"systemd-v44",
"v43",
"systemd-v43",
"v42",
"systemd-v42",
"v41",
"systemd-v41",
"v40",
"systemd-v40",
"v39",
"systemd-v39",
"v38",
"systemd-v38",
"v37",
"systemd-v37",
"v36",
"systemd-v36",
"v35",
"systemd-v35",
"v34",
"systemd-v34",
"v33",
"systemd-v33",
"v32",
"systemd-v32",
"v31",
"systemd-v31",
"v30",
"systemd-v30",
"v29",
"systemd-v29",
"v28",
"systemd-v28",
"v27",
"systemd-v27",
"v26",
"systemd-v26",
"v25",
"systemd-v25",
"v24",
"systemd-v24",
"v23",
"systemd-v23",
"v22",
"systemd-v22",
"v21",
"systemd-v21",
"v20",
"systemd-v20",
"v19",
"systemd-v19",
"v18",
"systemd-v18",
"v17",
"systemd-v17",
"v16",
"systemd-v16",
"v15",
"systemd-v15",
"v14",
"systemd-v14",
"v13",
"systemd-v13",
"v12",
"systemd-v12",
"v11",
"systemd-v11",
"v10",
"systemd-v10",
"v9",
"systemd-v9",
"v8",
"systemd-v8",
"v7",
"systemd-v7",
"v6",
"systemd-v6",
"v5",
"systemd-v5",
"v4",
"systemd-v4",
"v3",
"systemd-v3",
"v2",
"systemd-v2",
"v1",
"systemd-v1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-20386.json"
}
}
],
"modified": "2026-10-24T14:07:05.653008695Z",
"provider": "osv",
"references": [
"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZPCOMW5X6IZZXASCDD2CNW2DLF3YADC/",
"https://security.netapp.com/advisory/ntap-20200210-0002/",
"https://usn.ubuntu.com/4269-1/",
"https://github.com/systemd/systemd/commit/b2774a3ae692113e1f47a336a6c09bac9cfb49ad"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
},
{
"introduced": "18.04"
},
{
"last_affected": "18.04"
},
{
"introduced": "19.10"
},
{
"last_affected": "19.10"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "30"
},
{
"last_affected": "30"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"extracted_events": [
{
"range": [
{
"introduced": "15.1"
},
{
"last_affected": "15.1"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2019-20386",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 443086,
"published_at": "2020-01-21T06:15:11.827+00:00"
}