Published: 17/05/2019 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

systemd 242 changes the VT1 mode upon a logout, which allows malicious users to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.

Vulnerable Product	Search on Vulmon	Subscribe to Product
systemd project systemd 242
netapp cn1610_firmware -
netapp solidfire \\& hci management node -
netapp snapprotect -

Debian Bug report logs - #929116 systemd: CVE-2018-20839 Package: src:systemd; Maintainer for src:systemd is Debian systemd Maintainers <pkg-systemd-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 17 May 2019 12:15:01 UTC Severity: important Tags: fixed-upstream, ...

Impact: Important Public Date: 2019-05-17 CWE: CWE-200 Bugzilla: 1716955: CVE-2018-20839 systemd: misha ...

Intro Wazuh and Snyk (snykio) integration to scan Docker image vulnerabilities Snyk will help you find and automatically fix vulnerabilities in your code, open source dependencies, containers, and infrastructure as code In this integration we'll use Snyk’s CLI to scan for vulnerabilities in the Docker images and all their dependencies NOTE: Wazuh can use all the

CWE-200 https://github.com/systemd/systemd/pull/12378 https://github.com/systemd/systemd/commit/9725f1a10f80f5e0ae7d9b60547458622aeb322f https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1803993 http://www.securityfocus.com/bid/108389 https://security.netapp.com/advisory/ntap-20190530-0002/https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929116 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2018-20839

CVE-2018-20839

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect