An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
References
Link | Resource |
---|---|
https://github.com/kastel-security/Journald | Third Party Advisory |
https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf | Technical Description |
https://github.com/systemd/systemd/pull/28886 | |
https://github.com/systemd/systemd/releases | Release Notes |
Configurations
History
21 Dec 2023, 15:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
07 Nov 2023, 04:14
Type | Values Removed | Values Added |
---|---|---|
Summary | An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability." |
23 Jun 2023, 19:16
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-354 | |
CPE | cpe:2.3:a:systemd_project:systemd:253:-:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
First Time |
Systemd Project systemd
Systemd Project |
|
References | (MISC) https://github.com/kastel-security/Journald - Third Party Advisory | |
References | (MISC) https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf - Technical Description | |
References | (MISC) https://github.com/systemd/systemd/releases - Release Notes |
14 Jun 2023, 12:15
Type | Values Removed | Values Added |
---|---|---|
Summary | ** DISPUTED ** An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability." |
13 Jun 2023, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-06-13 17:15
Updated : 2024-08-02 15:16
NVD link : CVE-2023-31438
Mitre link : CVE-2023-31438
CVE.ORG link : CVE-2023-31438
JSON object : View
Products Affected
systemd_project
- systemd
CWE
CWE-354
Improper Validation of Integrity Check Value