CVE-2018-20839 - CVE House
Back to Database
Status published Medium CVE-2018-20839

systemd 242 changes the VT1 mode upon a logout, which...

Vulnerability Description

systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-20839

Credits & Attribution

No credits recorded in the NVD database.

References

More from systemd project

View All →
CVE-2022-45873
systemd 250 and 251 allows local users to achieve a...
Unknown 0
CVE-2021-33910
basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1...
Unknown 0
CVE-2020-13776
systemd through v245 mishandles numerical usernames such as ones composed...
Unknown 0
CVE-2019-6454
An issue was discovered in sd-bus in systemd 239. bus_process_object()...
Medium 5.5
CVE-2019-20386
An issue was discovered in button_open in login/logind-button.c in systemd...
Unknown 0

Affected Vendor

systemd project

View all reports →

Affected Software

systemd, cn1610 firmware, snapprotect, solidfire \& hci management node
Vulnerable Versions:
242

Timeline

Official Publish: May 17th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.