REDHAT-BUG-1666690: Low severity red hat enterprise linux vulnerability
A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux (since version v219-62.2) and CentOS. Function dispatchmessagereal() in journald-server.c does not free the memory allocated by setiovecfieldfree() to store the CMDLINE= entry. A local attacker may use this flaw to make systemd-journald crash.
However systemd-journald crash is automatically restarted by systemd by default.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1666690?
The severity of REDHAT-BUG-1666690 is classified as a memory leak issue affecting specific versions of Red Hat Enterprise Linux and CentOS.
What versions are affected by REDHAT-BUG-1666690?
REDHAT-BUG-1666690 affects Red Hat Enterprise Linux from version v219-62.2 and CentOS starting from the same version.
How do I fix REDHAT-BUG-1666690?
To fix REDHAT-BUG-1666690, update your system to the latest patched version provided by Red Hat or CentOS.
What causes the memory leak in REDHAT-BUG-1666690?
The memory leak in REDHAT-BUG-1666690 is caused by the dispatch_message_real() function in journald-server.c not properly freeing allocated memory.
Is there a workaround for REDHAT-BUG-1666690?
Currently, there are no official workarounds for REDHAT-BUG-1666690 aside from applying the available updates.