PT-2016-4042 · Systemd+1 · Systemd+1

Keszybz · Published 2016-04-19 · Updated 2018-10-30 · CVE-2015-8842

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions systemd versions prior to 229

Description The issue concerns weak permissions for the /var/log/journal/%m/system.journal file, allowing local users to read the file and obtain sensitive information.

Recommendations For versions prior to 229, update to version 229 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-8842

OPENSUSE-SU-2016_1101-1

SUSE-SU-2016:1346-1

SUSE-SU-2016:1351-1

SUSE-SU-2017:2699-1

SUSE-SU-2017:2700-1

Affected Products

Suse

Systemd

References · 35

• https://security-tracker.debian.org/tracker/CVE-2015-8842 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-8842 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-8842 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8842 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8842 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2016:1346-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1351-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8842 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-05/msg00109.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-8842 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00044.html · Vendor Advisory
• https://github.com/systemd/systemd/commit/afae249efa4774c6676738ac5de6aeb4daf4889f · Note
• https://bugzilla.suse.com/960158 · Note
• https://suse.com/security/cve/CVE-2014-9770 · Note
• http://openwall.com/lists/oss-security/2016/04/08/14 · Note