IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.5Yüksek

CVE-2018-16865

The systemd Project systemd Yayım: (7 yıl önce)

Açıklama

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.

Zayıflık türü (CWE): CWE-770

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
The systemd Project systemd through v240

Kaynaklar ve yamalar

Aynı üründe son açıklar — systemd

2.9Düşük
CVE-2026-40228
systemd systemd

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

6.2Orta
CVE-2026-40227
systemd systemd

In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element.

6.4Orta
CVE-2026-40226
systemd systemd

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

6.4Orta
CVE-2026-40225
systemd systemd

In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel output.

6.7Orta
CVE-2026-40224
systemd systemd

In systemd 259 before 260, there is local privilege escalation in systemd-machined because varlink can be used to reach the root namespace.

4.7Orta
CVE-2026-40223
systemd systemd

In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User=<unset> unit exists and is running.