A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-journald crash. This issue only affects versions shipped with Red Hat Enterprise since v219-62.2.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-journal-gatewayUpgrade systemd-networkdUpgrade systemd-debuginfoUpgrade systemd-resolvedUpgrade systemd-pythonUpgrade systemd-sysvUpgrade libgudev1Upgrade systemdUpgrade systemd-libsUpgrade systemd-develUpgrade libgudev1-devel | Jun 24, 2021 | Jan 28, 2019 |
| Centos_linux | — | Upgrade systemd-develUpgrade libgudev1Upgrade systemd-debuginfoUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-sysvUpgrade systemd-networkdUpgrade systemd-journal-gatewayUpgrade systemd-pythonUpgrade libgudev1-develUpgrade systemd | Feb 5, 2019 | Jan 28, 2019 |
| Debian | — | Upgrade systemd | Feb 14, 2019 | Feb 14, 2019 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 23, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade systemd-develUpgrade libgudev1Upgrade systemd-libsUpgrade systemdUpgrade systemd-sysvUpgrade libgudev1-develUpgrade systemd-python | Apr 2, 2019 | Jan 28, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-develUpgrade systemdUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd-libsUpgrade libgudev1Upgrade systemd-sysv | May 7, 2019 | Jan 28, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-sysvUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-pythonUpgrade systemd | Mar 11, 2019 | Jan 28, 2019 |
| Oracle_linux | — | Upgrade systemd-pythonUpgrade systemd-libsUpgrade systemd-sysvUpgrade libgudev1Upgrade systemdUpgrade systemd-develUpgrade systemd-journal-gatewayUpgrade systemd-resolvedUpgrade libgudev1-develUpgrade systemd-networkd | Jul 21, 2020 | Jan 14, 2019 |
| Redhat_linux | — | Upgrade systemd-debuginfoUpgrade systemd-resolvedUpgrade systemd-journal-gatewayUpgrade systemd-pythonUpgrade libgudev1-develUpgrade libgudev1Upgrade systemdUpgrade systemd-sysvUpgrade systemd-networkdUpgrade systemd-develUpgrade systemd-libs | Jan 30, 2019 | Jan 28, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub