PT-2016-3516 · Systemd+1 · Systemd+1

Andrei Borzenkov · Published 2016-04-19 · Updated 2018-10-30 · CVE-2014-9770

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions systemd versions prior to 214

Description The issue concerns weak permissions for journal files under /run/log/journal/%m and /var/log/journal/%m, allowing local users to obtain sensitive information by reading these files.

Recommendations For versions prior to 214, update to version 214 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-9770

OPENSUSE-SU-2016_1101-1

SUSE-SU-2016:1346-1

SUSE-SU-2016:1351-1

SUSE-SU-2016_1346-1

SUSE-SU-2016_1351-1

SUSE-SU-2017:2699-1

SUSE-SU-2017:2700-1

Affected Products

Suse

Systemd

References · 37

• https://osv.dev/vulnerability/SUSE-SU-2016:1346-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-9770 · Security Note
• https://osv.dev/vulnerability/CVE-2014-9770 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1351-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-9770 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-05/msg00109.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00044.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-9770 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-9770 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-9770 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-9770 · Vendor Advisory
• https://bugzilla.suse.com/976766 · Note
• https://suse.com/support/update/announcement/2016/suse-su-20161351-1 · Note
• http://openwall.com/lists/oss-security/2016/04/08/15 · Note
• https://bugzilla.suse.com/960158 · Note