Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-40228

Опубликовано: 10 апр. 2026
Источник: redhat
CVSS3: 2.9
EPSS Низкий

Описание

A flaw was found in systemd-journald. When the ForwardToWall=yes configuration is enabled, a local user who executes a logger -p emerg command can cause systemd-journald to send ANSI escape sequences to the terminals of other arbitrary users. This can lead to unintended output appearing on user terminals, potentially causing confusion or minor disruption.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10NetworkManagerNot affected
Red Hat Enterprise Linux 10rpm-ostreeNot affected
Red Hat Enterprise Linux 10systemdNot affected
Red Hat Enterprise Linux 7systemdNot affected
Red Hat Enterprise Linux 8NetworkManagerNot affected
Red Hat Enterprise Linux 8systemdNot affected
Red Hat Enterprise Linux 9NetworkManagerNot affected
Red Hat Enterprise Linux 9systemdNot affected
Red Hat Hardened ImagessystemdNot affected
Red Hat OpenShift Container Platform 4NetworkManagerNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-117
https://bugzilla.redhat.com/show_bug.cgi?id=2457316systemd: systemd-journald: Unintended output to user terminals via logger command

EPSS

Процентиль: 2%
0.00012
Низкий

2.9 Low

CVSS3

Связанные уязвимости

CVSS3: 2.9
ubuntu
2 дня назад

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

CVSS3: 2.9
nvd
5 дней назад

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

CVSS3: 2.9
debian
5 дней назад

In systemd 259, systemd-journald can send ANSI escape sequences to the ...

CVSS3: 2.9
github
5 дней назад

In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "logger -p emerg" command is executed, if ForwardToWall=yes is set.

EPSS

Процентиль: 2%
0.00012
Низкий

2.9 Low

CVSS3