7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
9.3%
Severity: High
Date : 2019-01-12
CVE-ID : CVE-2018-16864 CVE-2018-16865
Package : systemd
Type : arbitrary code execution
Remote : No
Link : https://security.archlinux.org/AVG-845
The package systemd before version 240.34-1 is vulnerable to arbitrary
code execution.
Upgrade to 240.34-1.
The problems have been fixed upstream in version 240.34.
None.
A memory corruption vulnerability has been found in the journald
component of systemd >= v230 and <= v240, in the set_iovec_field()
function. Passing several megabytes of command-line arguments to a
program that calls syslog() led to an attacker-controlled alloca(),
which could be used to override the content of the memory, in the
stack-clash fashion.
A memory corruption vulnerability has been found in the journald
component of systemd >= v201 and <= v240, in the
journal_file_append_entry() function. Sending a large “native” message
to /run/systemd/journal/socket led to an attacker-controlled alloca(),
which could be used to override the content of the memory, in the
stack-clash fashion.
A local attacker is able to execute arbitrary code by sending large log
messages.
https://www.qualys.com/2019/01/09/system-down/system-down.txt
https://github.com/systemd/systemd/pull/11374
https://github.com/systemd/systemd/pull/11374/commits/084eeb865ca63887098e0945fb4e93c852b91b0f
https://github.com/systemd/systemd/pull/11374/commits/052c57f132f04a3cf4148f87561618da1a6908b4
https://security.archlinux.org/CVE-2018-16864
https://security.archlinux.org/CVE-2018-16865
github.com/systemd/systemd/pull/11374
github.com/systemd/systemd/pull/11374/commits/052c57f132f04a3cf4148f87561618da1a6908b4
github.com/systemd/systemd/pull/11374/commits/084eeb865ca63887098e0945fb4e93c852b91b0f
security.archlinux.org/AVG-845
security.archlinux.org/CVE-2018-16864
security.archlinux.org/CVE-2018-16865
www.qualys.com/2019/01/09/system-down/system-down.txt
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
9.3%