medium5.3
CVE-2023-31438
An issue was discovered in systemd 253.
Impact
An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Systemd Project | Systemd | Version 253 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/kastel-security/Journald
- https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf
- https://github.com/systemd/systemd/pull/28886
- https://github.com/systemd/systemd/releases
- https://github.com/kastel-security/Journald
- https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf
- https://github.com/systemd/systemd/pull/28886
- https://github.com/systemd/systemd/releases