CVE-2018-16865
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 3.0%
exploitation probability
3.0%top 14% of all CVEs
observed exploitation
nono source reports it
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
The systemd Project · systemdReferences
http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.htmlhttps://access.redhat.com/errata/RHBA-2019:0327https://access.redhat.com/errata/RHSA-2019:0049https://access.redhat.com/errata/RHSA-2019:0204https://access.redhat.com/errata/RHSA-2019:0271https://access.redhat.com/errata/RHSA-2019:0342https://access.redhat.com/errata/RHSA-2019:0361https://access.redhat.com/errata/RHSA-2019:2402https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16865http://seclists.org/fulldisclosure/2019/May/21https://lists.debian.org/debian-lts-announce/2019/01/msg00016.htmlhttps://seclists.org/bugtraq/2019/May/25