CVE-2018-16866CWE-125CWE-200

An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'

Medium · published January 11, 2019

CVSS v3.0
4.3
EPSS
1%
Percentile
64.0
In the wild
Unconfirmed
What it is

An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01051 · 64.0th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2019-01-11T19:00Z
EPSS history
Timeline
  • 11 JAN 19:00Z
    An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'
    cvelistv5