CVE-2013-4391: Integer Overflow

First published: Thu Sep 20 2012(Updated: )

An integer overflow, leading to heap-based buffer overflow flaw was found in the way journald functionality of systemd, a system and service manager, processed native messages. A local attacker could provide a specially-crafted packet that when processed by systemd would lead to systemd daemon crash or, potentially, arbitrary code execution with the privileges of the user running the daemon. Issue found by Florian Weimer, Red Hat Product Security Team Upstream patch: [1] <a href="http://cgit.freedesktop.org/systemd/systemd/commit/?id=505b6a61c22d5565e9308045c7b9bf79f7d0517e">http://cgit.freedesktop.org/systemd/systemd/commit/?id=505b6a61c22d5565e9308045c7b9bf79f7d0517e</a>

Credit: secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/softwarecombine
• agent/first-publish-date
• agent/references
• agent/weakness
• collector/mitre-cve
• source/MITRE
• agent/author
• agent/remedy
• agent/last-modified-date
• agent/severity
• agent/event
• agent/description
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2013-4391
• agent/tags
• agent/trending
• vendor/systemd project
• canonical/systemd project systemd
• vendor/debian
• canonical/debian debian linux
• version/debian debian linux/7.0