Red Hat Security Advisory

RHSA-2019:2402

systemd security update

Released 2019-08-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.3) libgudev1-219-30.el7_3.13, libgudev1-devel-219-30.el7_3.13, systemd-219-30.el7_3.13 +4
Red Hat Enterprise Linux Server E4S (v. 7.3) libgudev1-219-30.el7_3.13, libgudev1-devel-219-30.el7_3.13, systemd-219-30.el7_3.13 +4
Red Hat Enterprise Linux Server Optional AUS (v. 7.3) systemd-journal-gateway-219-30.el7_3.13, systemd-networkd-219-30.el7_3.13, systemd-resolved-219-30.el7_3.13
Red Hat Enterprise Linux Server Optional E4S (v. 7.3) systemd-journal-gateway-219-30.el7_3.13, systemd-networkd-219-30.el7_3.13, systemd-resolved-219-30.el7_3.13
Red Hat Enterprise Linux Server Optional TUS (v. 7.3) systemd-journal-gateway-219-30.el7_3.13, systemd-networkd-219-30.el7_3.13, systemd-resolved-219-30.el7_3.13
Red Hat Enterprise Linux Server TUS (v. 7.3) libgudev1-219-30.el7_3.13, libgudev1-devel-219-30.el7_3.13, systemd-219-30.el7_3.13 +4

Fixes 2 records

TI-2018-12075 CVE-2018-16865 · GHSA-cwf3-gffj-25fm

Resource allocation without limits in systemd

MEDIUM 40

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03016 Published 2019-01-11 Fixed CWE-770

TI-2018-12074 CVE-2018-16864 · GHSA-h53q-m6g5-wfq9

Resource allocation without limits in systemd

LOW 37

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00711 Published 2019-01-11 Fixed CWE-770