REDHAT-BUG-1666690
First published: Wed Jan 16 2019(Updated: )
A memory leak was discovered in the backport of fixes for <a href="https://access.redhat.com/security/cve/CVE-2018-16864">CVE-2018-16864</a> in Red Hat Enterprise Linux (since version v219-62.2) and CentOS. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-journald crash. However systemd-journald crash is automatically restarted by systemd by default.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat Enterprise Linux | >=v219-62.2 | |
| CentOS | >=v219-62.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-1666690?
The severity of REDHAT-BUG-1666690 is classified as a memory leak issue affecting specific versions of Red Hat Enterprise Linux and CentOS.
What versions are affected by REDHAT-BUG-1666690?
REDHAT-BUG-1666690 affects Red Hat Enterprise Linux from version v219-62.2 and CentOS starting from the same version.
How do I fix REDHAT-BUG-1666690?
To fix REDHAT-BUG-1666690, update your system to the latest patched version provided by Red Hat or CentOS.
What causes the memory leak in REDHAT-BUG-1666690?
The memory leak in REDHAT-BUG-1666690 is caused by the dispatch_message_real() function in journald-server.c not properly freeing allocated memory.
Is there a workaround for REDHAT-BUG-1666690?
Currently, there are no official workarounds for REDHAT-BUG-1666690 aside from applying the available updates.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-3815
- agent/source
- agent/description
- agent/severity
- agent/references
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat enterprise linux
- vendor/centos
- canonical/centos