CVE-2018-20839

systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE aka current keyboard mode check is mishandled...

CVE-2018-20839

The CVE-2018-20839 entry concerns systemd 242, where a mishandled KDGKBMODE (current keyboard mode) check causes VT1 mode changes on logout. This can allow an attacker with physical access (watching shutdown or switching TTYs via Ctrl-Alt-F1/F2) to read cleartext passwords in certain scenarios. T...

Systemd Trust Management Issues Vulnerabilities

systemd is a Linux-based system and service manager from the German software developers Lennart Poettering. The product is compatible with SysV and LSB startup scripts and provides a framework for representing dependencies between system services. A trust management issue vulnerability exists in...

PT-2019-10270 · Systemd +1 · Systemd +1

Name of the Vulnerable Software and Affected Versions: systemd version 242 Description: The issue allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE aka current keyboard mode...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2019:1265-1)

This update for systemd fixes the following issues : Security issues fixed : CVE-2018-6954: Fixed a vulnerability in the symlink handling of systemd-tmpfiles which allowed a local user to obtain ownership of arbitrary files bsc1080919. CVE-2019-3842: Fixed a vulnerability in pamsystemd which...

SUSE-SU-2019:1265-1 Security update for systemd

This update for systemd fixes the following issues: Security issues fixed: - CVE-2018-6954: Fixed a vulnerability in the symlink handling of systemd-tmpfiles which allowed a local user to obtain ownership of arbitrary files bsc1080919. - CVE-2019-3842: Fixed a vulnerability in pamsystemd which...

Denial Of Service (DoS)

Red Hat Enterprise Linux is vulnerable to denial of serviceDoS attacks. This is because the function ispatchmessagereal in journald-server.c does not free the memory allocated by setiovecfieldfree to store the CMDLINE= entry. A local attacker may use this flaw to make systemd-journald crash...

Photon OS 2.0: Systemd PHSA-2019-2.0-0153

An update of the systemd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0153. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Systemd PHSA-2019-1.0-0220

An update of the systemd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0220. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EulerOS Virtualization 3.0.1.0 : systemd (EulerOS-SA-2019-1416)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in...

Photon OS 1.0: Systemd PHSA-2019-1.0-0228

An update of the systemd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0228. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EulerOS Virtualization for ARM 64 3.0.1.0 : systemd (EulerOS-SA-2019-1412)

According to the versions of the systemd packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An allocation of memory without limits, that could result in the stack clashing with another memory region, was...

systemd/fuzz-varlink: Heap-buffer-overflow in varlink_enqueue_json

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5692571826782208 Project: systemd Fuzzer: libFuzzersystemdfuzz-varlink Fuzz target binary: fuzz-varlink Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

systemd/fuzz-varlink: Use-of-uninitialized-value in varlink_write

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5730863070838784 Project: systemd Fuzzer: libFuzzersystemdfuzz-varlink Fuzz target binary: fuzz-varlink Job Type: libfuzzermsansystemd Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash

It was discovered that systemd allocates a buffer large enough to store the path field of a dbus message without performing enough checks. A local attacker may trigger this flaw by sending a dbus message to systemd with a large path making systemd crash or possibly elevating his privileges...

Moderate: Red Hat Security Advisory: systemd security and bug fix update

An update for systemd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: container-tools:rhel8 security and bug fix update

An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ALSA-2019:0975 Important: container-tools:rhel8 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: A flaw was found in the way runc handled system file descriptors when running containers. A malicious container could use this flaw to overwrite contents of the runc...

RLSA-2019:0975 Important: container-tools:rhel8 security and bug fix update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: A flaw was found in the way runc handled system file descriptors when running containers. A malicious container could use this flaw to overwrite contents of the runc...

Fedora Update for systemd FEDORA-2019-1fb1547321

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...