ubuntu · CVE-2018-16865

Quick triage

Priority: high Published: 2019-01-11 00:00:00 UTC Updated: 2025-08-25 22:49:27 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2018-16865 high priority: Ubuntu including 1 source packages (systemd), 5 status rows across 5 suites (bionic, cosmic, trusty, upstream, xenial): released 3, needs-triage 1, not-affected 1.

Description:

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.

cvelogic Threat Intelligence