CVE-2019-3815

Опубликовано: 28 янв. 2019

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the _CMDLINE= entry. A local attacker may use this flaw to make systemd-journald crash. This issue only affects versions shipped with Red Hat Enterprise since v219-62.2.

Ссылки

http://www.securityfocus.com/bid/106632
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHBA-2019:0327
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:0201
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3815
Issue Tracking
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00013.html
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/106632
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHBA-2019:0327
Vendor Advisory
https://access.redhat.com/errata/RHSA-2019:0201
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3815
Issue Tracking
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00013.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.0014

Низкий

3.3 Low

CVSS3

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-401

Связанные уязвимости

CVE-2019-3815

CVSS3: 3.3

ubuntu

почти 7 лет назад

A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-journald crash. This issue only affects versions shipped with Red Hat Enterprise since v219-62.2.

CVE-2019-3815

CVSS3: 3.3

redhat

почти 7 лет назад

A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-journald crash. This issue only affects versions shipped with Red Hat Enterprise since v219-62.2.

CVE-2019-3815

CVSS3: 3.3

debian

почти 7 лет назад

A memory leak was discovered in the backport of fixes for CVE-2018-168 ...

GHSA-c7jw-qwf7-gqxx

CVSS3: 3.3

github

больше 3 лет назад

A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-journald crash. This issue only affects versions shipped with Red Hat Enterprise since v219-62.2.

ELSA-2019-0201

oracle-oval

почти 7 лет назад

ELSA-2019-0201: systemd security update (LOW)

EPSS

Процентиль: 35%

0.0014

Низкий

3.3 Low

CVSS3

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-401