Red Hat, Inc. CWE-770

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges.

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.

https://access.redhat.com/security/cve/CVE-2018-16865 [No Types Assigned]

https://bugzilla.redhat.com/show_bug.cgi?id=1653861 [No Types Assigned]

Red Hat, Inc. CWE-770

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges.

https://access.redhat.com/security/cve/CVE-2018-16865 [No Types Assigned]

https://bugzilla.redhat.com/show_bug.cgi?id=1653861 [No Types Assigned]

OR
     *cpe:2.3:a:freedesktop:systemd:*:*:*:*:*:*:*:* versions up to (including) 240

OR
     *cpe:2.3:a:systemd_project:systemd:*:*:*:*:*:*:*:* versions up to (including) 240

http://www.openwall.com/lists/oss-security/2019/05/10/4 Mailing List

http://www.openwall.com/lists/oss-security/2019/05/10/4 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/07/20/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/07/20/2 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/07/20/2 [No Types Assigned]

OR
     *cpe:2.3:o:redhat:virtualization:4.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redh

OR
     *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*
     *cpe:2.3:o:redha

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NIST CWE-770

NIST CWE-119

https://access.redhat.com/errata/RHSA-2019:2402 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:2402 Third Party Advisory

Red Hat, Inc. AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Red Hat, Inc. CWE-770

https://access.redhat.com/errata/RHSA-2019:2402 [No Types Assigned]

OR
     *cpe:2.3:a:oracle:enterprise_communications_broker:3.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:enterprise_communications_broker:3.1.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:oracle_communications_session_border_controller:8.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:oracle_communications_session_border_controller:8.1.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:oracle_communications_session_border_controller:8.2.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:oracle:communications_session_border_controller:8.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:communications_session_border_controller:8.1.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:communications_session_border_controller:8.2.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:enterprise_communications_broker:3.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:enterprise_communications_broker:3.1.0:*:*:*:*:*:*:*

http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html No Types Assigned

http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html Third Party Advisory, VDB Entry

http://seclists.org/fulldisclosure/2019/May/21 No Types Assigned

http://seclists.org/fulldisclosure/2019/May/21 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/05/10/4 No Types Assigned

http://www.openwall.com/lists/oss-security/2019/05/10/4 Mailing List

https://seclists.org/bugtraq/2019/May/25 No Types Assigned

https://seclists.org/bugtraq/2019/May/25 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2019/May/21 [No Types Assigned]

http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html [No Types Assigned]

https://seclists.org/bugtraq/2019/May/25 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2019/05/10/4 [No Types Assigned]

OR
     *cpe:2.3:a:oracle:enterprise_communications_broker:3.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:enterprise_communications_broker:3.1.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:oracle_communications_session_border_controller:8.0.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:oracle_communications_session_border_controller:8.1.0:*:*:*:*:*:*:*
     *cpe:2.3:a:oracle:oracle_communications_session_border_controller:8.2.0:*:*:*:*:*:*:*

https://access.redhat.com/errata/RHBA-2019:0327 No Types Assigned

https://access.redhat.com/errata/RHBA-2019:0327 Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html No Types Assigned

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html Patch, Third Party Advisory

https://access.redhat.com/errata/RHBA-2019:0327 [No Types Assigned]

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html [No Types Assigned]

https://security.gentoo.org/glsa/201903-07 No Types Assigned

https://security.gentoo.org/glsa/201903-07 Third Party Advisory

https://security.gentoo.org/glsa/201903-07 [No Types Assigned]

OR
     *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redh

https://access.redhat.com/errata/RHSA-2019:0342 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:0342 Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0361 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:0361 Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0361 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2019:0342 [No Types Assigned]

OR
     *cpe:2.3:a:freedesktop:systemd:*:*:*:*:*:*:*:* versions up to (including) 240

OR
     *cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*
     *cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

(AV:L/AC:L/Au:N/C:P/I:P/A:P)

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-119

http://www.securityfocus.com/bid/106525 No Types Assigned

http://www.securityfocus.com/bid/106525 Third Party Advisory, VDB Entry

https://access.redhat.com/errata/RHSA-2019:0049 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:0049 Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0204 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:0204 Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0271 No Types Assigned

https://access.redhat.com/errata/RHSA-2019:0271 Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16865 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16865 Issue Tracking, Patch

https://lists.debian.org/debian-lts-announce/2019/01/msg00016.html No Types Assigned

https://lists.debian.org/debian-lts-announce/2019/01/msg00016.html Mailing List, Third Party Advisory

https://security.netapp.com/advisory/ntap-20190117-0001/ No Types Assigned

https://security.netapp.com/advisory/ntap-20190117-0001/ Third Party Advisory

https://usn.ubuntu.com/3855-1/ No Types Assigned

https://usn.ubuntu.com/3855-1/ Third Party Advisory

https://www.debian.org/security/2019/dsa-4367 No Types Assigned

https://www.debian.org/security/2019/dsa-4367 Third Party Advisory

https://www.qualys.com/2019/01/09/system-down/system-down.txt No Types Assigned

https://www.qualys.com/2019/01/09/system-down/system-down.txt Exploit, Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0271 [No Types Assigned]

https://access.redhat.com/errata/RHSA-2019:0204 [No Types Assigned]

https://lists.debian.org/debian-lts-announce/2019/01/msg00016.html [No Types Assigned]

https://security.netapp.com/advisory/ntap-20190117-0001/ [No Types Assigned]

https://access.redhat.com/errata/RHSA-2019:0049 [No Types Assigned]

https://www.debian.org/security/2019/dsa-4367 [No Types Assigned]

http://www.securityfocus.com/bid/106525 [No Types Assigned]

https://usn.ubuntu.com/3855-1/ [No Types Assigned]