Back to Database
Status published
High
CVE-2018-16864
An allocation of memory without limits, that could result in...
Vulnerability Description
An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate his privileges. Versions through v240 are vulnerable.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-16864
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/106523
- https://access.redhat.com/errata/RHSA-2019:0342
- https://lists.debian.org/debian-lts-announce/2019/01/msg00016.html
- https://www.debian.org/security/2019/dsa-4367
- https://access.redhat.com/errata/RHSA-2019:0204
- https://security.netapp.com/advisory/ntap-20190117-0001/
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16864
- https://www.qualys.com/2019/01/09/system-down/system-down.txt
- https://usn.ubuntu.com/3855-1/
- https://access.redhat.com/errata/RHSA-2019:0049
- https://access.redhat.com/errata/RHSA-2019:0271
- https://access.redhat.com/errata/RHSA-2019:0361
- https://security.gentoo.org/glsa/201903-07
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://access.redhat.com/errata/RHBA-2019:0327
- https://access.redhat.com/errata/RHSA-2019:2402
- http://www.openwall.com/lists/oss-security/2021/07/20/2
More from The systemd Project
View All →CVE-2019-3842
In systemd before v242-rc4, it was discovered that pam_systemd does...
Medium
4.5
CVE-2019-3815
A memory leak was discovered in the backport of fixes...
Low
3.3
CVE-2018-16888
It was discovered systemd does not correctly check the content...
Medium
4.4
CVE-2018-16866
An out of bounds read was discovered in systemd-journald in...
Medium
4.3
CVE-2018-16865
An allocation of memory without limits, that could result in...
High
7.5
Affected Vendor
The systemd Project
View all reports →Affected Software
systemd
Vulnerable Versions:
through v240
Timeline
Official Publish:
January 11th, 2019
Last Modified:
June 9th, 2025
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H