REDHAT-BUG-1653855: Buffer Overflow

Published Nov 27, 2018

Updated

A flaw was found in systemd-journald. A stack buffer overflow when passing several MB of arguments to a program calling syslog function. This can lead to a denial of service attack or arbitrary code execution in some cases.

Affected Software

1 affected component

systemd systemd-journald

Event History

Nov 27, 2018

Data Sourced

via Red Hat·06:46 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1653855?

The severity of REDHAT-BUG-1653855 is high due to the potential for denial of service and arbitrary code execution.

How do I fix REDHAT-BUG-1653855?

To fix REDHAT-BUG-1653855, update the systemd-journald package to the latest version provided by your distribution.

What kind of exploit can be performed due to REDHAT-BUG-1653855?

Exploit of REDHAT-BUG-1653855 can lead to denial of service or arbitrary code execution through stack buffer overflow.

Which software is affected by REDHAT-BUG-1653855?

The software affected by REDHAT-BUG-1653855 is systemd-journald.

Can REDHAT-BUG-1653855 lead to remote attacks?

Yes, REDHAT-BUG-1653855 can be leveraged for remote attacks due to the nature of the vulnerability in systemd-journald.