[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

247085

 
 

909

 
 

194218

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Stack overflow vulnerability when receiving many journald entries

ID: oval:org.secpod.oval:def:50169Date: (C)2019-01-11   (M)2023-12-20
Class: VULNERABILITYFamily: unix




An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges.

Platform:
Red Hat Enterprise Linux 7
CentOS 7
Product:
systemd
Reference:
CVE-2018-16865
CVE    1
CVE-2018-16865
CPE    3
cpe:/a:ubuntu_developers:systemd
cpe:/o:redhat:enterprise_linux:7
cpe:/o:centos:centos:7

© SecPod Technologies