medium5.3
CVE-2023-31437
An issue was discovered in systemd 253.
Impact
An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Systemd Project | Systemd | Version 253 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/kastel-security/Journald
- https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf
- https://github.com/systemd/systemd/releases
- https://github.com/kastel-security/Journald
- https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf
- https://github.com/systemd/systemd/releases