CVE-2019-3815 Denial of service in systemd
A local attacker can crash systemd-journald by triggering a memory leak in the _CMDLINE handling, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-3815?
CVE-2019-3815 is a low-severity denial of service vulnerability in Debian Debian Linux, published on 28 Jan 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c does not free the memory allocated by set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-journald crash. This issue only affects versions shipped with Red Hat Enterprise since v219-62.2.
Weakness: CWE-401
Which versions are affected by CVE-2019-3815?
It affects 7 products.
Linux distribution packages (40)
libgudev1 Red Hat:enterprise_linux:7::client | All versions | 0:219-62.el7_6.3 |
libgudev1-devel Red Hat:enterprise_linux:7::client | All versions | 0:219-62.el7_6.3 |
systemd Red Hat:enterprise_linux:7::client | All versions | 0:219-62.el7_6.3 |
systemd-debuginfo Red Hat:enterprise_linux:7::client | All versions | 0:219-62.el7_6.3 |
systemd-devel Red Hat:enterprise_linux:7::client | All versions | 0:219-62.el7_6.3 |
systemd-journal-gateway Red Hat:enterprise_linux:7::client | All versions | 0:219-62.el7_6.3 |
systemd-libs Red Hat:enterprise_linux:7::client | All versions | 0:219-62.el7_6.3 |
systemd-networkd Red Hat:enterprise_linux:7::client | All versions | 0:219-62.el7_6.3 |
systemd-python Red Hat:enterprise_linux:7::client | All versions | 0:219-62.el7_6.3 |
systemd-resolved Red Hat:enterprise_linux:7::client | All versions | 0:219-62.el7_6.3 |
systemd-sysv Red Hat:enterprise_linux:7::client | All versions | 0:219-62.el7_6.3 |
libgudev1 Red Hat:enterprise_linux:7::computenode | All versions | 0:219-62.el7_6.3 |
libgudev1-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:219-62.el7_6.3 |
systemd Red Hat:enterprise_linux:7::computenode | All versions | 0:219-62.el7_6.3 |
systemd-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 0:219-62.el7_6.3 |
systemd-devel Red Hat:enterprise_linux:7::computenode | All versions | 0:219-62.el7_6.3 |
systemd-journal-gateway Red Hat:enterprise_linux:7::computenode | All versions | 0:219-62.el7_6.3 |
systemd-libs Red Hat:enterprise_linux:7::computenode | All versions | 0:219-62.el7_6.3 |
systemd-networkd Red Hat:enterprise_linux:7::computenode | All versions | 0:219-62.el7_6.3 |
systemd-python Red Hat:enterprise_linux:7::computenode | All versions | 0:219-62.el7_6.3 |
systemd-resolved Red Hat:enterprise_linux:7::computenode | All versions | 0:219-62.el7_6.3 |
systemd-sysv Red Hat:enterprise_linux:7::computenode | All versions | 0:219-62.el7_6.3 |
libgudev1 Red Hat:enterprise_linux:7::server | All versions | 0:219-62.el7_6.3 |
libgudev1-devel Red Hat:enterprise_linux:7::server | All versions | 0:219-62.el7_6.3 |
systemd Red Hat:enterprise_linux:7::server | All versions | 0:219-62.el7_6.3 |
systemd-debuginfo Red Hat:enterprise_linux:7::server | All versions | 0:219-62.el7_6.3 |
systemd-devel Red Hat:enterprise_linux:7::server | All versions | 0:219-62.el7_6.3 |
systemd-journal-gateway Red Hat:enterprise_linux:7::server | All versions | 0:219-62.el7_6.3 |
systemd-libs Red Hat:enterprise_linux:7::server | All versions | 0:219-62.el7_6.3 |
systemd-networkd Red Hat:enterprise_linux:7::server | All versions | 0:219-62.el7_6.3 |
systemd-python Red Hat:enterprise_linux:7::server | All versions | 0:219-62.el7_6.3 |
systemd-resolved Red Hat:enterprise_linux:7::server | All versions | 0:219-62.el7_6.3 |
systemd-sysv Red Hat:enterprise_linux:7::server | All versions | 0:219-62.el7_6.3 |
libgudev1 Red Hat:enterprise_linux:7::workstation | All versions | 0:219-62.el7_6.3 |
libgudev1-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:219-62.el7_6.3 |
systemd Red Hat:enterprise_linux:7::workstation | All versions | 0:219-62.el7_6.3 |
systemd-debuginfo Red Hat:enterprise_linux:7::workstation | All versions | 0:219-62.el7_6.3 |
systemd-devel Red Hat:enterprise_linux:7::workstation | All versions | 0:219-62.el7_6.3 |
systemd-journal-gateway Red Hat:enterprise_linux:7::workstation | All versions | 0:219-62.el7_6.3 |
systemd-libs Red Hat:enterprise_linux:7::workstation | All versions | 0:219-62.el7_6.3 |
Products include Debian Debian Linux, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Server Aus, Redhat Enterprise Linux Server Eus, Redhat Enterprise Linux Workstation and 1 more.
How do I fix CVE-2019-3815?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-3815 being exploited?
There is no known exploitation of CVE-2019-3815 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DLA-1711-1, GHSA-c7jw-qwf7-gqxx, RHSA-2019:0201.