PT-2019-1257 · Systemd +5 · Systemd-Journald +5

🗓️ 01 Jan 2019 00:00:00Reported by Positive TechnologiesType

Out of bounds read in systemd-journald versions 221–239 may disclose memory via colon-ending log messages.

Reporter	Title	Published	Views	Family All 596
ALT Linux	Security fix for the ALT Linux 9 package systemd version 1:241-alt2	19 Feb 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package systemd version 1:240-alt3	8 Jan 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package systemd version 1:239-alt3	29 Oct 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package NetworkManager version 1.14.5-alt1.gitba83251bba87	1 Nov 201800:00	–	altlinux
0day.today	Linux systemd Symlink Dereference Via chown_one() Exploit	26 Oct 201800:00	–	zdt
0day.today	Linux systemd Line Splitting Exploit	26 Oct 201800:00	–	zdt
0day.today	systemd - reexec State Injection Exploit	29 Oct 201800:00	–	zdt
0day.today	systemd - chown_one() can Dereference Symlinks Exploit	29 Oct 201800:00	–	zdt
0day.today	systemd-journald Memory Corruption / Information Leak Vulnerability	11 Jan 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm

Source	Link
qualys	www.qualys.com/2019/01/09/system-down/system-down.txt
security-tracker	www.security-tracker.debian.org/tracker/DSA-4367-2
osv	www.osv.dev/vulnerability/USN-3855-1
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2019-00414
bdu	www.bdu.fstec.ru/vul/2019-01963
ubuntu	www.ubuntu.com/security/notices/USN-3855-1
bdu	www.bdu.fstec.ru/vul/2019-00412
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
usn	www.usn.ubuntu.com/3855-1

13 Feb 2023 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.14.3 - 8.8

CVSS 27.2

CVSS 38.8

EPSS0.02958

SSVC