Lucene search

Veracode Vulnerability DatabaseVERACODE:21108

HistoryAug 08, 2019 - 12:07 a.m.

Denial Of Service (DoS)

2019-08-0800:07:47

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

JSON

systemd is vulnerable to denial of service (DoS). The vulnerability exists through an out-of-bounds read when parsing a crafted syslog message.

CPENameOperatorVersion
systemdeq208__20.ael7b_1.5
systemdeq219__62.el7_6.5
systemdeq219__62.el7_6.6.0.1
systemdeq219__57.el7_5.3
systemdeq208__20.ael7b_1.2
systemdeq219__62.el7.7.0.1
systemdeq208__20.ael7b_1.3
systemdeq219__57.el7_5.1
systemdeq219__62.el7_6.2
systemdeq219__62.el7_6.6

Name	Operator	Version
systemd	eq	208__20.ael7b_1.5
systemd	eq	219__62.el7_6.5
systemd	eq	219__62.el7_6.6.0.1
systemd	eq	219__57.el7_5.3
systemd	eq	208__20.ael7b_1.2
systemd	eq	219__62.el7.7.0.1
systemd	eq	208__20.ael7b_1.3
systemd	eq	219__57.el7_5.1
systemd	eq	219__62.el7_6.2
systemd	eq	219__62.el7_6.6

Rows per page:

1-10 of 341

References

packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html

seclists.org/fulldisclosure/2019/May/21

www.openwall.com/lists/oss-security/2019/05/10/4

www.securityfocus.com/bid/106527

access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index

access.redhat.com/errata/RHBA-2020:0547

access.redhat.com/errata/RHSA-2019:2091

access.redhat.com/errata/RHSA-2019:3222

access.redhat.com/errata/RHSA-2020:0593

access.redhat.com/errata/RHSA-2020:1264

access.redhat.com/security/cve/CVE-2018-16866

access.redhat.com/security/updates/classification/#moderate

bugzilla.redhat.com/show_bug.cgi?id=1267552

bugzilla.redhat.com/show_bug.cgi?id=1272485

bugzilla.redhat.com/show_bug.cgi?id=1463678

bugzilla.redhat.com/show_bug.cgi?id=1585913

bugzilla.redhat.com/show_bug.cgi?id=1619543

bugzilla.redhat.com/show_bug.cgi?id=1631625

bugzilla.redhat.com/show_bug.cgi?id=1641764

bugzilla.redhat.com/show_bug.cgi?id=1643172

bugzilla.redhat.com/show_bug.cgi?id=1651257

bugzilla.redhat.com/show_bug.cgi?id=1653867

bugzilla.redhat.com/show_bug.cgi?id=1660422

bugzilla.redhat.com/show_bug.cgi?id=1663365

bugzilla.redhat.com/show_bug.cgi?id=1666612

bugzilla.redhat.com/show_bug.cgi?id=1691511

bugzilla.redhat.com/show_bug.cgi?id=1693559

bugzilla.redhat.com/show_bug.cgi?id=1693716

bugzilla.redhat.com/show_bug.cgi?id=1697909

bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16866

seclists.org/bugtraq/2019/May/25

security.gentoo.org/glsa/201903-07

security.netapp.com/advisory/ntap-20190117-0001/

usn.ubuntu.com/3855-1/

www.debian.org/security/2019/dsa-4367

www.qualys.com/2019/01/09/system-down/system-down.txt

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

JSON

Related for VERACODE:21108