CVE-2018-16866: Infoleak
A flaw was found in systemd-journald. An out-of-bounds read when parsing a crafted syslog message that could lead to information disclosure.
Other sources
An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-16866?
CVE-2018-16866 is a vulnerability found in systemd-journald that allows a local attacker to disclose process memory data by exploiting an out-of-bounds read when parsing log messages terminating with a colon.
Which software versions are affected by CVE-2018-16866?
Versions from v221 to v239 of systemd-journald, Debian Debian Linux 9.0, Canonical Ubuntu Linux 16.04, 18.04, and 18.10, Netapp Active Iq Performance Analytics Services, Netapp Element Software, and various versions of Redhat Enterprise Linux are affected.
What is the severity of CVE-2018-16866?
CVE-2018-16866 has a severity rating of medium with a CVSS score of 3.3.
How can I fix CVE-2018-16866 on my system?
To fix CVE-2018-16866, you should apply the appropriate security patches provided by your operating system vendor or upgrade to a non-vulnerable version of systemd-journald.
Where can I find more information about CVE-2018-16866?
You can find more information about CVE-2018-16866 on the MITRE CVE database (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16866), Ubuntu security notices (https://ubuntu.com/security/notices/USN-3855-1), and NIST NVD (https://nvd.nist.gov/vuln/detail/CVE-2018-16866).