An allocation of memory without limits that could result in the stack clashing with another memory region was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker or a remote one if systemd-journal-remote is used may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

Unbounded memory allocation in systemd-journald may crash or allow code execution when many entries are sent to the journal socket through version 240.

Reporter	Title	Published	Views	Family All 136
0day.today	systemd-journald Memory Corruption / Information Leak Vulnerability	11 Jan 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: Vulnerabiliies in systemd affect PowerKVM	4 Mar 201905:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Advanced Cloud Paks are vulnerable to multiple issues with in the Systemd package (CVE-2018-16866 CVE-2018-16864 CVE-2018-16865)	8 Feb 201923:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v	18 Apr 201916:40	–	ibm
ALT Linux	Security fix for the ALT Linux 9 package systemd version 1:240-alt3	8 Jan 201900:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : systemd (ALAS-2019-1141)	10 Jan 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : systemd (ALAS-2019-1160)	14 Feb 201900:00	–	nessus
Tenable Nessus	CentOS 7 : systemd (CESA-2019:0049)	16 Jan 201900:00	–	nessus
Tenable Nessus	Debian DLA-1639-1 : systemd security update	23 Jan 201900:00	–	nessus
Tenable Nessus	Debian DSA-4367-1 : systemd - security update	14 Jan 201900:00	–	nessus