Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 13/06/2023 Updated: 11/04/2024

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 0

An issue exists in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
systemd project systemd 253

Three Vulnerabilities in Journald Forward Secure Log Sealing

Three Vulnerabilities in Journald Forward Secure Log Sealing This repository contains the accompanying code for the publication "Secure Logging in between Theory and Practice: Security Analysis of the Implementation of Forward Secure Log Sealing in Journald" (in this repository or on eprint) For details on the individual vulnerabilities and theoretical background we

CWE-354 https://github.com/systemd/systemd/releases https://github.com/kastel-security/Journald/blob/main/journald-publication.pdf https://github.com/kastel-security/Journald https://github.com/systemd/systemd/pull/28885 https://nvd.nist.gov https://github.com/kastel-security/Journald

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-31439

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect