Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-16866
HistoryJan 11, 2019 - 7:29 p.m.

CVE-2018-16866

2019-01-1119:29:00
CWE-200
CWE-125
[email protected]
web.nvd.nist.gov

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON

An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ‘:’. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.

Affected configurations

NVD
Node
systemd_projectsystemdRange221–239
Node
debiandebian_linuxMatch9.0
Node
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch18.10
Node
netappactive_iq_performance_analytics_servicesMatch-
OR
netappelement_software
Node
redhatenterprise_linuxMatch7.6
OR
redhatenterprise_linux_compute_node_eusMatch7.6
OR
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_for_ibm_z_systems_\(structure_a\)Match7_s390x
OR
redhatenterprise_linux_for_ibm_z_systems_eusMatch7.6
OR
redhatenterprise_linux_for_power_big_endianMatch7.0
OR
redhatenterprise_linux_for_power_big_endian_eusMatch7.6
OR
redhatenterprise_linux_for_power_little_endianMatch7.0
OR
redhatenterprise_linux_for_power_little_endian_eusMatch7.6
OR
redhatenterprise_linux_for_scientific_computingMatch7.0
OR
redhatenterprise_linux_serverMatch7.0
OR
redhatenterprise_linux_server_ausMatch7.4
OR
redhatenterprise_linux_server_ausMatch7.6
OR
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch7.4
OR
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch7.6
OR
redhatenterprise_linux_server_tusMatch7.4
OR
redhatenterprise_linux_server_tusMatch7.6
OR
redhatenterprise_linux_server_update_services_for_sap_solutionsMatch7.4
OR
redhatenterprise_linux_server_update_services_for_sap_solutionsMatch7.6
OR
redhatenterprise_linux_workstationMatch7.0

Related

openvas 17
veracode 1
debiancve 1
ubuntucve 1
cve 1
osv 2
prion 1
nessus 29
cvelist 1
cbl_mariner 1
f5 1
redhatcve 1
redhat 4
archlinux 1
cloudfoundry 1
zdt 1
debian 2
ubuntu 1
ibm 2
myhack58 1
amazon 3
suse 2
thn 1
centos 1
oraclelinux 1
gentoo 1
fedora 6
photon 2
openvas
openvas
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2019-1748)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for systemd (EulerOS-SA-2020-1451)
2020-04-16 00:00:00
Ubuntu: Security Advisory (USN-3855-1)
2019-01-12 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-08-08 00:07:47
debiancve
debiancve
CVE-2018-16866
2019-01-11 19:29:00
ubuntucve
ubuntucve
CVE-2018-16866
2019-01-11 00:00:00
cve
cve
CVE-2018-16866
2019-01-11 19:29:00
osv
osv
CVE-2018-16866
2019-01-11 19:29:00
systemd - security update
2019-01-13 00:00:00
prion
prion
Design/Logic Flaw
2019-01-11 19:29:00
nessus
nessus
EulerOS 2.0 SP2 : systemd (EulerOS-SA-2019-1748)
2019-07-22 00:00:00
RHEL 7 : systemd (RHSA-2019:3222)
2019-10-30 00:00:00
RHEL 8 : systemd (Unpatched Vulnerability)
2024-05-11 00:00:00
cvelist
cvelist
CVE-2018-16866
2019-01-11 19:00:00
cbl_mariner
cbl_mariner
CVE-2018-16866 affecting package systemd 239-44
2020-09-09 06:09:21
f5
f5
K30683410 : systemd vulnerability CVE-2018-16866
2019-02-21 00:00:00
redhatcve
redhatcve
CVE-2018-16866
2020-04-09 10:13:40
redhat
redhat
(RHSA-2020:0593) Moderate: systemd security update
2020-02-25 11:32:36
(RHSA-2020:1264) Moderate: systemd security and bug fix update
2020-04-01 07:32:50
(RHSA-2019:3222) Moderate: systemd security and bug fix update
2019-10-29 12:00:51
archlinux
archlinux
[ASA-201901-4] systemd: multiple issues
2019-01-08 00:00:00
cloudfoundry
cloudfoundry
USN-3855-1: systemd vulnerabilities | Cloud Foundry
2019-01-24 00:00:00
zdt
zdt
systemd-journald Memory Corruption / Information Leak Vulnerability
2019-01-11 00:00:00
debian
debian
[SECURITY] [DSA 4367-1] systemd security update
2019-01-13 21:56:20
[SECURITY] [DSA 4367-1] systemd security update
2019-01-13 21:56:20
ubuntu
ubuntu
systemd vulnerabilities
2019-01-11 00:00:00
ibm
ibm
Security Bulletin: IBM MQ Advanced Cloud Paks are vulnerable to multiple issues with in the Systemd package (CVE-2018-16866 CVE-2018-16864 CVE-2018-16865)
2019-02-08 23:15:01
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v
2019-04-18 16:40:01
myhack58
myhack58
Linux 3 a serious vulnerability systemd, may lead to data breaches-vulnerability warning-the black bar safety net
2019-01-16 00:00:00
amazon
amazon
Important: systemd
2019-01-07 21:58:00
Medium: systemd
2021-06-16 20:36:00
Important: systemd
2021-05-20 17:00:00
suse
suse
Security update for systemd (moderate)
2019-01-29 00:00:00
Security update for systemd (important)
2019-01-29 00:00:00
thn
thn
New Systemd Privilege Escalation Flaws Affect Most Linux Distributions
2019-01-10 12:18:00
centos
centos
libgudev1, systemd security update
2019-08-30 04:25:11
oraclelinux
oraclelinux
systemd security, bug fix, and enhancement update
2019-08-13 00:00:00
gentoo
gentoo
systemd: Multiple vulnerabilities
2019-03-10 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: systemd-239-11.git4dc7dce.fc29
2019-02-11 01:57:56
[SECURITY] Fedora 29 Update: systemd-239-8.gite339eae.fc29
2019-01-13 02:32:41
[SECURITY] Fedora 28 Update: systemd-238-11.gita76ee90.fc28
2019-02-18 01:26:53
photon
photon
Critical Photon OS Security Update - PHSA-2019-0205
2019-02-04 00:00:00
Critical Photon OS Security Update - PHSA-2019-0128
2019-02-13 00:00:00

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

JSON
Related for NVD:CVE-2018-16866
openvas17veracode1debiancve1ubuntucve1cve1osv2prion1nessus29cvelist1cbl_mariner1f51redhatcve1redhat4archlinux1cloudfoundry1zdt1debian2ubuntu1ibm2myhack581amazon3suse2thn1centos1oraclelinux1gentoo1fedora6photon2