REDHAT-BUG-859104: Low severity systemd vulnerability

Published Sep 20, 2012

Updated

A possibility for denial of loggin service was found in the way journald functionality of systemd, a system and service manager, processed native messages when file was chosen as their origin. A local attacker could use this flaw to provide a specially-crafted file descriptor, leading the journald file read process to block, resultingin portion of subsequent native messages intended to be logged to be ignored.

Issue found by Florian Weimer, Red Hat Product Security Team

Affected Software

1 affected component

Red Hat systemd

Event History

Sep 20, 2012

Data Sourced

via Red Hat·02:47 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-859104?

The severity of REDHAT-BUG-859104 is considered to be high due to its potential to cause denial of service.

How do I fix REDHAT-BUG-859104?

To fix REDHAT-BUG-859104, you should update the systemd package to the latest version provided by Red Hat.

Who is affected by REDHAT-BUG-859104?

Users of Red Hat's systemd that utilize journald functionality with native messages are affected by REDHAT-BUG-859104.

What type of attack does REDHAT-BUG-859104 enable?

REDHAT-BUG-859104 enables a local attacker to create a denial of login service by manipulating a specially crafted file descriptor.

What components are involved in REDHAT-BUG-859104?

The components involved in REDHAT-BUG-859104 are the journald functionality and file descriptor processing within systemd.