PT-2023-23327 · Systemd+2 · Systemd+2

Felix Dörre + 1 · Publicado 2023-06-13 · Atualizado 2024-08-02 · CVE-2023-31439

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions systemd version 253

Description An issue was discovered where an attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications.

Recommendations For systemd version 253, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-354

Identificadores relacionados

ALT-PU-2023-7891

CVE-2023-31439

ECHO-BDD2-C207-BEF2

Produtos afetados

Alt Linux

Debian

Systemd

Referências · 9

• https://github.com/systemd/systemd/releases · Nota
• https://github.com/systemd/systemd/pull/28885 · Nota
• https://github.com/kastel-security/Journald · Correção
• https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf · Nota
• https://t.me/cvenotify/52212 · Publicação no Telegram
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-31439 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-31439 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-31439 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2023-31439 · Aviso do Fabricante