CVE-2018-16865 - CVE House
Back to Database
Status published High CVE-2018-16865

An allocation of memory without limits, that could result in...

Vulnerability Description

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-16865

Credits & Attribution

No credits recorded in the NVD database.

References

More from The systemd Project

View All →
CVE-2019-3842
In systemd before v242-rc4, it was discovered that pam_systemd does...
Medium 4.5
CVE-2019-3815
A memory leak was discovered in the backport of fixes...
Low 3.3
CVE-2018-16888
It was discovered systemd does not correctly check the content...
Medium 4.4
CVE-2018-16866
An out of bounds read was discovered in systemd-journald in...
Medium 4.3
CVE-2018-16864
An allocation of memory without limits, that could result in...
High 7.4

Affected Vendor

The systemd Project

View all reports →

Affected Software

systemd
Vulnerable Versions:
through v240

Timeline

Official Publish: January 11th, 2019
Last Modified: June 9th, 2025
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-770

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1498 Network Denial of Service
Impact
T1190 Exploit Public-Facing Application
Initial Access
T1562 Impair Defenses
Defense Evasion
T1046 Network Service Discovery
Discovery