CVE-2013-4393: Low severity systemd vulnerability
A possibility for denial of loggin service was found in the way journald functionality of systemd, a system and service manager, processed native messages when file was chosen as their origin. A local attacker could use this flaw to provide a specially-crafted file descriptor, leading the journald file read process to block, resultingin portion of subsequent native messages intended to be logged to be ignored.
Issue found by Florian Weimer, Red Hat Product Security Team
Other sources
journald in systemd, when the origin of native messages is set to file, allows local users to cause a denial of service (logging service blocking) via a crafted file descriptor.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4393?
CVE-2013-4393 has been classified as a medium severity vulnerability.
How do I fix CVE-2013-4393?
To mitigate CVE-2013-4393, upgrade systemd to version 194 or later.
Who is affected by CVE-2013-4393?
CVE-2013-4393 affects users of systemd versions prior to 194.
What type of vulnerability is CVE-2013-4393?
CVE-2013-4393 is a denial of service vulnerability in the journald functionality of systemd.
Can a remote attacker exploit CVE-2013-4393?
CVE-2013-4393 can only be exploited by a local attacker with access to the affected system.