An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.

🗓️ 18 Aug 2020 07:00:00Reported by MicrosoftType

Systemd-journald out of bounds read on colon-terminated messages enables disclosure; versions 221–239.

Reporter	Title	Published	Views	Family All 109
0day.today	systemd-journald Memory Corruption / Information Leak Vulnerability	11 Jan 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM MQ Advanced Cloud Paks are vulnerable to multiple issues with in the Systemd package (CVE-2018-16866 CVE-2018-16864 CVE-2018-16865)	8 Feb 201923:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v	18 Apr 201916:40	–	ibm
Tenable Nessus	Amazon Linux 2 : systemd (ALAS-2019-1141)	10 Jan 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : systemd (ALAS-2021-1643) (deprecated)	24 May 202100:00	–	nessus
Tenable Nessus	CentOS 7 : systemd (CESA-2019:2091)	30 Aug 201900:00	–	nessus
Tenable Nessus	Debian DSA-4367-1 : systemd - security update	14 Jan 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : systemd (EulerOS-SA-2019-1748)	22 Jul 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : systemd (EulerOS-SA-2019-1998)	24 Sep 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : systemd (EulerOS-SA-2019-2232)	8 Nov 201900:00	–	nessus