CVE-2018-16865

Name of the Vulnerable Software and Affected Versions systemd-journald versions through v240 systemd-journal-remote versions through v240

Description The issue is caused by an unbounded memory allocation in the systemd-journald and systemd-journal-remote binary system, which can lead to a stack clash with another memory region. This can be exploited by a local or remote attacker to crash systemd-journald or execute code with journald privileges.

Recommendations For versions through v240, consider disabling the systemd-journald service until a patch is available to prevent potential exploitation. Restrict access to the systemd-journal-remote service to minimize the risk of remote exploitation. Avoid sending a large number of entries to the journal socket to prevent crashing systemd-journald. At the moment, there is no information about a newer version that contains a fix for this vulnerability.