WaratekVRT Sign in

CVE-2018-16865 systemd

Affected softwaresystemd
Severity7.8 High CVSS 3.1 3 scores
WeaknessCWE-770
Published11 Jan 2019
Updated17 Jun 2026

Description

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.

Exploitation status

No public exploit

No exploit has been reported in the sources we check. Published 7 years ago.
  • CISA KEV not listed
  • VulnCheck KEV not listed
  • CISA Vulnrichment exploitation: none
  • Indexed PoC none indexed
  • EPSS 3.0% chance in 30 days

Waratek protection

Outside Waratek scope

A Java vulnerability, but not one Waratek protects. It affects only Java on a user's desktop (applets, Web Start, JavaFX, the installer), sits in a product the Waratek agent can't be installed into, or is in a package we don't expect in business applications. The decision below says which.

  • Protection none
  • Action not pursued none
  • Review human Researcher
  • Record active
Decided by Manual classification of this CVE in the legacy dataset
Finding A manual classification set this CVE's status to Outside Waratek scope, but the CVE names a tracked product.

CVSS

7.8 HIGH v3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 3 metrics

We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.

VersionScoreBandVectorAssignerType
CVSS 3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD Primary published
CVSS 3.0 7.5 HIGH CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H secalert@redhat.com Secondary
CVSS 2.0 4.6 none AV:L/AC:L/Au:N/C:P/I:P/A:P NVD Primary

Affected software and releases

Products and versions

11 products, 20 version entries
SourceVendorProductSchemeAffected versions
nvd canonical ubuntu linux generic 16.04 · 18.04 · 18.10
nvd debian debian linux generic 8.0 · 9.0
nvd oracle communications session border controller generic 8.0.0 · 8.1.0 · 8.2.0
nvd oracle enterprise communications broker generic 3.0.0 · 3.1.0
nvd redhat enterprise linux desktop generic 7.0
nvd redhat enterprise linux server generic 7.0
nvd redhat enterprise linux server aus generic 7.3 · 7.6
nvd redhat enterprise linux server eus generic 7.5 · 7.6
nvd redhat enterprise linux server tus generic 7.3 · 7.6
nvd redhat enterprise linux workstation generic 7.0
nvd systemd project systemd generic ≤ 240

References

URLTags
http://packetstormsecurity.com/files/152841/System-Down-A-systemd-journald-Exploit.html Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2019/May/21 Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/05/10/4 Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/07/20/2 Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/106525 Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHBA-2019:0327 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0049 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0204 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0271 Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0342 Third Party Advisory

Timeline
Published2019-01-11By the CVE Program.
NVD record modified2026-06-17NVD's own last-modified date for this record.