PT-2016-4042 · Systemd+1 · Systemd+1

Keszybz · Publicado 2016-04-19 · Atualizado 2018-10-30 · CVE-2015-8842

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions systemd versions prior to 229

Description The issue concerns weak permissions for the /var/log/journal/%m/system.journal file, allowing local users to read the file and obtain sensitive information.

Recommendations For versions prior to 229, update to version 229 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-8842

OPENSUSE-SU-2016_1101-1

SUSE-SU-2016:1346-1

SUSE-SU-2016:1351-1

SUSE-SU-2017:2699-1

SUSE-SU-2017:2700-1

Produtos afetados

Suse

Systemd

Referências · 35

• https://github.com/systemd/systemd/commit/afae249efa4774c6676738ac5de6aeb4daf4889f · Nota
• https://security-tracker.debian.org/tracker/CVE-2015-8842 · Aviso do Fabricante
• https://bugzilla.suse.com/960158 · Nota
• https://suse.com/security/cve/CVE-2014-9770 · Nota
• http://openwall.com/lists/oss-security/2016/04/08/14 · Nota
• https://bugzilla.suse.com/970423 · Nota
• https://suse.com/security/cve/CVE-2015-8842.html · Nota
• https://bugzilla.suse.com/972612 · Nota
• https://osv.dev/vulnerability/CVE-2015-8842 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-9770.html · Nota
• https://bugzilla.suse.com/972727 · Nota
• https://cve.org/CVERecord?id=CVE-2015-8842 · Nota de Segurança
• https://bugzilla.suse.com/show_bug.cgi?id=972612 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8842 · Aviso do Fabricante
• https://bugzilla.suse.com/978275 · Nota