CVE-2019-3815 - CVE House
Back to Database
Status published Low CVE-2019-3815

A memory leak was discovered in the backport of fixes...

Vulnerability Description

A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-journald crash. This issue only affects versions shipped with Red Hat Enterprise since v219-62.2.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-3815

Credits & Attribution

No credits recorded in the NVD database.

References

More from The systemd Project

View All →
CVE-2019-3842
In systemd before v242-rc4, it was discovered that pam_systemd does...
Medium 4.5
CVE-2018-16888
It was discovered systemd does not correctly check the content...
Medium 4.4
CVE-2018-16866
An out of bounds read was discovered in systemd-journald in...
Medium 4.3
CVE-2018-16865
An allocation of memory without limits, that could result in...
High 7.5
CVE-2018-16864
An allocation of memory without limits, that could result in...
High 7.4

Affected Vendor

The systemd Project

View all reports →

Affected Software

systemd
Vulnerable Versions:
v219-62.2 and newer

Timeline

Official Publish: January 28th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-401

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1486 Data Encrypted for Impact
Impact
T1562 Impair Defenses
Defense Evasion