An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade systemd-pythonUpgrade systemd-resolvedUpgrade systemd-debuginfoUpgrade libgudev1Upgrade systemd-develUpgrade systemd-networkdUpgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-sysvUpgrade systemd-journal-gatewayUpgrade systemd | Sep 19, 2024 | Jun 13, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Jun 13, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub