ISOMAN

CVE

CVE-2018-16866

An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.

Severity
LOW
CVSS
3.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html
  2. http://seclists.org/fulldisclosure/2019/May/21
  3. http://www.openwall.com/lists/oss-security/2019/05/10/4
  4. http://www.securityfocus.com/bid/106527
  5. https://access.redhat.com/errata/RHSA-2019:2091
  6. https://access.redhat.com/errata/RHSA-2019:3222
  7. https://access.redhat.com/errata/RHSA-2020:0593
  8. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16866
  9. https://seclists.org/bugtraq/2019/May/25
  10. https://security.gentoo.org/glsa/201903-07
  11. https://security.netapp.com/advisory/ntap-20190117-0001/
  12. https://usn.ubuntu.com/3855-1/
  13. https://www.debian.org/security/2019/dsa-4367
  14. https://www.qualys.com/2019/01/09/system-down/system-down.txt
  15. http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html
  16. http://seclists.org/fulldisclosure/2019/May/21
  17. http://www.openwall.com/lists/oss-security/2019/05/10/4
  18. http://www.securityfocus.com/bid/106527
  19. https://access.redhat.com/errata/RHSA-2019:2091
  20. https://access.redhat.com/errata/RHSA-2019:3222