PT-2023-23327 · Systemd+2 · Systemd+2

Felix Dörre + 1 · Published 2023-06-13 · Updated 2024-08-02 · CVE-2023-31439

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions systemd version 253

Description An issue was discovered where an attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications.

Recommendations For systemd version 253, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-354

Related Identifiers

ALT-PU-2023-7891

CVE-2023-31439

ECHO-BDD2-C207-BEF2

Affected Products

Alt Linux

Debian

Systemd

References · 9

• https://github.com/kastel-security/Journald · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-31439 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31439 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31439 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-31439 · Vendor Advisory
• https://github.com/systemd/systemd/releases · Note
• https://github.com/systemd/systemd/pull/28885 · Note
• https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf · Note
• https://t.me/cvenotify/52212 · Telegram Post