CVE-2014-9770
published 2016-04-20CVE-2014-9770: tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows…
PriorityP48low3.3CVSS 3.0
AVLACLPRLUINSUCLINAN
EPSS
0.35%
27.6th percentile
tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows local users to obtain sensitive information by reading these files.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | systemd | < systemd 215-1 (bookworm) | systemd 215-1 (bookworm) |
| opensuse | opensuse | — | — |
| systemd_project | systemd | >= 0 < 215-1 | 215-1 |
| systemd_project | systemd | >= 0 < 215-1 | 215-1 |
| systemd_project | systemd | >= 0 < 215-1 | 215-1 |
| systemd_project | systemd | >= 0 < 215-1 | 215-1 |
CVSS provenance
nvdv3.03.3LOWCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv3.3LOW
vendor_debian3.3LOW
vendor_redhat3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
systemd: weak permissions for journal files
vendor_redhat·2016-04-08·CVSS 3.3
CVE-2014-9770 [LOW] CWE-732 systemd: weak permissions for journal files
systemd: weak permissions for journal files
tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows local users to obtain sensitive information by reading these files.
Package: systemd (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2014-9770: systemd - tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal ...
vendor_debian·2014·CVSS 3.3
CVE-2014-9770 [LOW] CVE-2014-9770: systemd - tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal ...
tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows local users to obtain sensitive information by reading these files.
Scope: local
bookworm: resolved (fixed in 215-1)
bullseye: resolved (fixed in 215-1)
forky: resolved (fixed in 215-1)
sid: resolved (fixed in 215-1)
trixie: resolved (fixed in 215-1)
GHSA
GHSA-pmq6-472x-q66p: tmpfiles
ghsa_unreviewed·2022-05-14
CVE-2014-9770 [LOW] GHSA-pmq6-472x-q66p: tmpfiles
tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows local users to obtain sensitive information by reading these files.
OSV
CVE-2014-9770: tmpfiles
osv·2016-04-20·CVSS 3.3
CVE-2014-9770 [LOW] CVE-2014-9770: tmpfiles
tmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) /run/log/journal/%m and (2) /var/log/journal/%m, which allows local users to obtain sensitive information by reading these files.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00044.htmlhttp://lists.opensuse.org/opensuse-updates/2016-05/msg00109.htmlhttp://www.openwall.com/lists/oss-security/2016/04/08/14http://www.openwall.com/lists/oss-security/2016/04/08/15https://bugzilla.suse.com/show_bug.cgi?id=972612http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00044.htmlhttp://lists.opensuse.org/opensuse-updates/2016-05/msg00109.htmlhttp://www.openwall.com/lists/oss-security/2016/04/08/14http://www.openwall.com/lists/oss-security/2016/04/08/15https://bugzilla.suse.com/show_bug.cgi?id=972612
2016-04-20
Published