PT-2016-3516 · Systemd+1 · Systemd+1

Andrei Borzenkov · Publicado 2016-04-19 · Atualizado 2018-10-30 · CVE-2014-9770

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions systemd versions prior to 214

Description The issue concerns weak permissions for journal files under /run/log/journal/%m and /var/log/journal/%m, allowing local users to obtain sensitive information by reading these files.

Recommendations For versions prior to 214, update to version 214 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-9770

OPENSUSE-SU-2016_1101-1

SUSE-SU-2016:1346-1

SUSE-SU-2016:1351-1

SUSE-SU-2016_1346-1

SUSE-SU-2016_1351-1

SUSE-SU-2017:2699-1

SUSE-SU-2017:2700-1

Produtos afetados

Suse

Systemd

Referências · 37

• https://osv.dev/vulnerability/SUSE-SU-2016:1346-1 · Aviso do Fabricante
• https://bugzilla.suse.com/976766 · Nota
• https://suse.com/support/update/announcement/2016/suse-su-20161351-1 · Nota
• https://cve.org/CVERecord?id=CVE-2014-9770 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2014-9770 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2016/04/08/15 · Nota
• https://bugzilla.suse.com/960158 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2016:1351-1 · Aviso do Fabricante
• https://bugzilla.suse.com/970860 · Nota
• https://suse.com/security/cve/CVE-2015-8842 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/2DQEDLIIIDITTGGOGFN6BTPB2HYBHL7V · Nota
• https://bugzilla.suse.com/965897 · Nota
• https://ubuntu.com/security/CVE-2014-9770 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-9770 · Nota
• http://openwall.com/lists/oss-security/2016/04/08/14 · Nota