CVE-2018-16865

CVSS 7.5 HIGHEPSS 3.0%CWE-770

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.5EPSS 3.0%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

11 Jan 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

The systemd Project · systemd

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html https://access.redhat.com/errata/RHBA-2019:0327 https://access.redhat.com/errata/RHSA-2019:0049 https://access.redhat.com/errata/RHSA-2019:0204 https://access.redhat.com/errata/RHSA-2019:0271 https://access.redhat.com/errata/RHSA-2019:0342 https://access.redhat.com/errata/RHSA-2019:0361 https://access.redhat.com/errata/RHSA-2019:2402 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16865 http://seclists.org/fulldisclosure/2019/May/21 https://lists.debian.org/debian-lts-announce/2019/01/msg00016.html https://seclists.org/bugtraq/2019/May/25