REDHAT-BUG-859104
First published: Thu Sep 20 2012(Updated: )
A possibility for denial of loggin service was found in the way journald functionality of systemd, a system and service manager, processed native messages when file was chosen as their origin. A local attacker could use this flaw to provide a specially-crafted file descriptor, leading the journald file read process to block, resultingin portion of subsequent native messages intended to be logged to be ignored. Issue found by Florian Weimer, Red Hat Product Security Team
| Affected Software | Affected Version | How to fix |
|---|---|---|
| systemd |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2013/10/01/9
- http://cgit.freedesktop.org/systemd/systemd/commit/src/journal/journald-native.c?id=1dfa7e79a60de680086b1d93fcc3629b463f58bd
- http://cgit.freedesktop.org/systemd/systemd/commit/src/journal/journald-native.c?id=4871690d9e32608bbd9b18505b5326c2079c9690
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=859104#c5
- http://cgit.freedesktop.org/systemd/systemd/commit/src/journal/journald
- https://bugzilla.redhat.com/show_bug.cgi?id=859104
Frequently Asked Questions
What is the severity of REDHAT-BUG-859104?
The severity of REDHAT-BUG-859104 is considered to be high due to its potential to cause denial of service.
How do I fix REDHAT-BUG-859104?
To fix REDHAT-BUG-859104, you should update the systemd package to the latest version provided by Red Hat.
Who is affected by REDHAT-BUG-859104?
Users of Red Hat's systemd that utilize journald functionality with native messages are affected by REDHAT-BUG-859104.
What type of attack does REDHAT-BUG-859104 enable?
REDHAT-BUG-859104 enables a local attacker to create a denial of login service by manipulating a specially crafted file descriptor.
What components are involved in REDHAT-BUG-859104?
The components involved in REDHAT-BUG-859104 are the journald functionality and file descriptor processing within systemd.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2013-4393
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/systemd