Memory leak in systemd-journald - CVE-2019-3815

Vulnerability identifier: #VU17361

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-3815

CWE-ID: CWE-401

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists due to the function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker can trigger memory leak in journald-server.c and cause the service to crash.

The vulnerability exists due to insufficient fix for CVE-2018-16864.

systemd-journald
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power

Install update from vendor's website.

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3815
• https://access.redhat.com/errata/RHSA-2019:0201

• Red Hat update for systemd