CVE-2013-4393

journald in systemd, when the origin of native messages is set to file, allows local users to cause a denial of service logging service blocking via a crafted file descriptor...

CVE-2013-4391

Integer overflow in the validuserfield function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow...

CVE-2013-4392

The systemd service is vulnerable to a symlink attack when updating file permissions. A local user can exploit this to modify permissions and SELinux security contexts for arbitrary files. The vulnerability is categorized under CWE-59: Improper Link Resolution Before File Access ('Link Following'...

CVE-2013-4391

Integer overflow in the validuserfield function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow...

CVE-2013-4391

CVE-2013-4391 : Integer overflow in systemd’s journald-native.c (valid_user_field) allows remote attackers to crash the service and possibly execute code via a very large journal data field, triggering a heap-based buffer overflow. Documented impact includes denial of service and potential arbitr...

CVE-2013-4394

CVE-2013-4394 concerns systemd’s SetX11Keyboard function. When PKLA is used to change group permissions on XKB layouts, local users in that group may modify the Xorg X11 Server configuration file and potentially gain privileges through vectors involving special and control characters. The vulnera...

CVE-2013-4392

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files...

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

CVE-2013-4394

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

CVE-2013-4393

CVE-2013-4393 concerns the journald component of systemd. The vulnerability occurs when the origin of native messages is set to file, allowing a local attacker to trigger a denial of service (logging service blocking) by using a crafted file descriptor. The impact described in connected sources i...

CVE-2013-4392

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files...

PT-2013-4993

Name of the Vulnerable Software and Affected Versions systemd affected versions not specified Description The issue is related to an integer overflow in the valid user field function, which can be triggered by a large journal data field. This can cause a denial of service crash and potentially...

PT-2013-4996

Name of the Vulnerable Software and Affected Versions systemd affected versions not specified Description The issue allows local users in a specific group to modify the Xorg X11 Server configuration file and possibly gain privileges. This is achieved through the SetX11Keyboard function when...

PT-2013-4995

Name of the Vulnerable Software and Affected Versions systemd affected versions not specified Description The issue allows local users to cause a denial of service, specifically blocking the logging service, by utilizing a crafted file descriptor when the origin of native messages is set to file ...

PT-2013-4994 · Systemd +2 · Systemd +2

Name of the Vulnerable Software and Affected Versions: systemd affected versions not specified Description: The issue allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files. Recommendations: At the moment, there is ...

CVE-2013-4391: Integer Overflow or Wraparound

Integer overflow in the validuserfield function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow...

CVE-2013-4394: Incorrect Default Permissions

The SetX11Keyboard function in systemd, when PolicyKit Local Authority PKLA is used to change the group permissions on the X Keyboard Extension XKB layouts description, allows local users in the group to modify the Xorg X11 Server configuration file and possibly gain privileges via vectors...

CVE-2013-4393: Undefined Security Weakness

journald in systemd, when the origin of native messages is set to file, allows local users to cause a denial of service logging service blocking via a crafted file descriptor...

CVE-2013-4392: Improper Link Resolution Before File Access

systemd, when updating file permissions, allows local users to change the permissions and SELinux security contexts for arbitrary files via a symlink attack on unspecified files...

Fedora 18 : xen-4.2.3-3.fc18 (2013-18373)

Two security fixes CVE-2013-4355 CVE-2013-4361, Set 'Domain-0' label in xenstored.service systemd file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...