CVE-2018-16865: Buffer Overflow
A flaw was found in systemd-journald. An uncontrolled alloca() by writing a crafted message to /run/systemd/journal/socket that results in a stack buffer overflow. This can lead to a denial of service attack or arbitrary code execution in some cases.
Other sources
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.
— Ubuntu
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-16865?
CVE-2018-16865 is a vulnerability in systemd-journald that allows an attacker to crash the system by allocating memory without limits.
What is the severity of CVE-2018-16865?
The severity of CVE-2018-16865 is high, with a CVSS score of 7.8.
How can an attacker exploit CVE-2018-16865?
An attacker can exploit CVE-2018-16865 by sending a large number of entries to the journal socket in systemd-journald, causing the stack to clash with another memory region and potentially crashing the system.
How can I fix CVE-2018-16865 on Ubuntu systems?
To fix CVE-2018-16865 on Ubuntu systems, update the systemd package to version 229-4ubuntu21.15.
Where can I find more information about CVE-2018-16865?
You can find more information about CVE-2018-16865 at the following references:• [MITRE CVE-2018-16865](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16865)• [Ubuntu Security Notice USN-3855-1](https://ubuntu.com/security/notices/USN-3855-1)• [NVD CVE-2018-16865](https://nvd.nist.gov/vuln/detail/CVE-2018-16865)