CVE-2018-20839: Infoleak
Published May 17, 2019
·Updated
systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.
Affected Software
7 affected components
Systemd Project Systemd=242
NetApp Cn1610 Firmware
NetApp Cn1610
NetApp Snapprotect
NetApp Solidfire \& Hci Management Node
All of the following
NetApp Cn1610 Firmware
NetApp Cn1610
Remediation
Patch Available
Patch Available
Event History
May 17, 2019
CVE Published
via MITRE·03:39 AM
Data Sourced
via MITRE·03:39 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-20839.
2
What is the severity of CVE-2018-20839?
The severity of CVE-2018-20839 is critical with a score of 9.8.
3
How does CVE-2018-20839 work?
CVE-2018-20839 allows attackers to read cleartext passwords by changing the VT1 mode upon a logout and mishandling the KDGKBMODE check.
4
Are there any known affected software versions?
Yes, the affected software version is systemd 242.
5
Is there a fix available for CVE-2018-20839?
Yes, a fix is available for CVE-2018-20839. Please refer to the provided references for more information.