REDHAT-BUG-1653861: Buffer Overflow

Published Nov 27, 2018

Updated

A flaw was found in systemd-journald. An uncontrolled alloca() by writing a crafted message to /run/systemd/journal/socket that results in a stack buffer overflow. This can lead to a denial of service attack or arbitrary code execution in some cases.

Affected Software

1 affected component

systemd systemd-journald

Event History

Nov 27, 2018

Data Sourced

via Red Hat·07:00 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1653861?

The severity of REDHAT-BUG-1653861 is considered critical due to its potential for denial of service and arbitrary code execution.

How do I fix REDHAT-BUG-1653861?

To fix REDHAT-BUG-1653861, you should update the systemd-journald package to the latest version that addresses this vulnerability.

What causes the vulnerability in REDHAT-BUG-1653861?

The vulnerability in REDHAT-BUG-1653861 is caused by an uncontrolled allocation during the writing of a crafted message to the systemd journal socket.

What are the risks associated with REDHAT-BUG-1653861?

The risks associated with REDHAT-BUG-1653861 include the possibility of denial of service attacks and arbitrary code execution on affected systems.

Is REDHAT-BUG-1653861 specific to a particular version of systemd-journald?

Yes, REDHAT-BUG-1653861 affects specific versions of systemd-journald, and it is recommended to check the release notes for your version.