Уязвимость CVE-2018-16866: Информация

Описание

An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.

Важность: LOW (3,3) Вектор: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2018-16866
Опубликовано: 11 января 2019 г.
Изменено: 13 февраля 2023 г.
Идентификатор типа ошибки: CWE-200, CWE-125

Исправленные пакеты

Имя пакета
Ветка
Исправлено в версии
Версия в репозитории
Errata ID
№ Задания
Состояние
systemdsisyphus240-alt1254.10-alt2ALT-PU-2019-1000-1218867Исправлено
systemdp10240-alt1249.17-alt2ALT-PU-2019-1000-1218867Исправлено
systemdp9240-alt1247.13-alt1ALT-PU-2019-1000-1218867Исправлено
systemdp8237-alt2.M80P.4239-alt6ALT-PU-2019-1020-1219091Исправлено
systemdc10f1240-alt1249.17-alt2ALT-PU-2019-1000-1218867Исправлено
systemdc9f2240-alt1246.14-alt1ALT-PU-2019-1000-1218867Исправлено

Ссылки на рекомендации, решения и инструменты

Ссылка
Ресурс
https://www.qualys.com/2019/01/09/system-down/system-down.txt
  • Exploit
  • Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16866
  • Issue Tracking
  • Patch
  • Third Party Advisory
USN-3855-1
  • Third Party Advisory
106527
  • Third Party Advisory
  • VDB Entry
DSA-4367
  • Third Party Advisory
https://security.netapp.com/advisory/ntap-20190117-0001/
  • Third Party Advisory
GLSA-201903-07
  • Third Party Advisory
[oss-security] 20190510 Re: System Down: A systemd-journald exploit
  • Mailing List
  • Third Party Advisory
20190513 Re: System Down: A systemd-journald exploit
  • Mailing List
  • Third Party Advisory
http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html
  • Third Party Advisory
  • VDB Entry
20190513 Re: System Down: A systemd-journald exploit
  • Mailing List
  • Third Party Advisory
RHSA-2019:2091
  • Third Party Advisory
RHSA-2019:3222
  • Third Party Advisory
RHSA-2020:0593
  • Third Party Advisory

    1. Конфигурация 1

      cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:*
      Start including
      221
      End including
      239

      Конфигурация 2

      cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

      Конфигурация 3

      cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
      cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
      cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

      Конфигурация 4

      cpe:2.3:a:netapp:active_iq_performance_analytics_services:-:*:*:*:*:*:*:*
      cpe:2.3:a:netapp:element_software:*:*:*:*:*:*:*:*

      Конфигурация 5

      cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux:7.6:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.6:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:7.4:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_compute_node_eus:7.6:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.4:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:7.6:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_\(structure_a\):7_s390x:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:7.6:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian_eus:7.6:*:*:*:*:*:*:*
      cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:7.6:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Версия: v24.5.0
Наверх