CVE-2018-16864 log

Severity High
Remote No
Type Arbitrary code execution
A memory corruption vulnerability has been found in the journald component of systemd >= v230 and <= v240, in the set_iovec_field() function. Passing several megabytes of command-line arguments to a program that calls syslog() led to an attacker-controlled alloca(), which could be used to override the content of the memory, in the stack-clash fashion.
Group Package Affected Fixed Severity Status Ticket
AVG-845 systemd 240.0-3 240.34-1 High Fixed
Date Advisory Group Package Severity Type
12 Jan 2019 ASA-201901-9 AVG-845 systemd High arbitrary code execution