CVE-2018-16864: Buffer Overflow
A flaw was found in systemd-journald. A stack buffer overflow when passing several MB of arguments to a program calling syslog function. This can lead to a denial of service attack or arbitrary code execution in some cases.
Other sources
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable.
— Ubuntu
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-16864?
CVE-2018-16864 is a vulnerability found in systemd-journald that allows a local attacker to crash the service or escalate privileges.
How severe is CVE-2018-16864?
CVE-2018-16864 has a severity rating of 7.8, which is considered high.
What is affected by CVE-2018-16864?
CVE-2018-16864 affects systemd versions up to and including 204-1, 232-25+deb9u6, and 240-2 on Debian. Other affected software versions can be found in the vulnerability details.
How can I fix CVE-2018-16864?
To fix CVE-2018-16864, you should update systemd to version 240-4 or 232-25+deb9u7 on Debian. For other affected software, refer to the recommended versions given in the vulnerability details.
Where can I find more information about CVE-2018-16864?
You can find more information about CVE-2018-16864 at the following references: [link1], [link2], [link3].