CVE-2018-20839

systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or…

published May 17, 2019

CVSS
—
EPSS
2%
Percentile
84.4
In the wild
Unconfirmed
What it is

systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02478 · 84.4th percentile
Published
2019-05-17T03:39Z
EPSS history
Timeline
  • 17 MAY 03:39Z
    systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or…
    cvelistv5