CVE-2015-8842
published 2016-04-20CVE-2015-8842: tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive…
PriorityP47low3.3CVSS 3.0
AVLACLPRLUINSUCLINAN
EPSS
0.36%
28.6th percentile
tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | systemd | < systemd 215-1 (bookworm) | systemd 215-1 (bookworm) |
| opensuse | opensuse | — | — |
| systemd_project | systemd | >= 0 < 215-1 | 215-1 |
| systemd_project | systemd | >= 0 < 215-1 | 215-1 |
| systemd_project | systemd | >= 0 < 215-1 | 215-1 |
| systemd_project | systemd | >= 0 < 215-1 | 215-1 |
CVSS provenance
nvdv3.03.3LOWCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
osv3.3LOW
vendor_debian3.3LOW
vendor_redhat3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-x9v6-p82f-rw5v: tmpfiles
ghsa_unreviewed·2022-05-14
CVE-2015-8842 [LOW] GHSA-x9v6-p82f-rw5v: tmpfiles
tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file.
OSV
CVE-2015-8842: tmpfiles
osv·2016-04-20·CVSS 3.3
CVE-2015-8842 [LOW] CVE-2015-8842: tmpfiles
tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file.
Red Hat
systemd: improper use of tmpfiles.d to create persistent journal files
vendor_redhat·2016-04-08·CVSS 3.3
CVE-2015-8842 [LOW] CWE-732 systemd: improper use of tmpfiles.d to create persistent journal files
systemd: improper use of tmpfiles.d to create persistent journal files
tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file.
Package: systemd (Red Hat Enterprise Linux 7) - Not affected
Debian
CVE-2015-8842: systemd - tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log...
vendor_debian·2015·CVSS 3.3
CVE-2015-8842 [LOW] CVE-2015-8842: systemd - tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log...
tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file.
Scope: local
bookworm: resolved (fixed in 215-1)
bullseye: resolved (fixed in 215-1)
forky: resolved (fixed in 215-1)
sid: resolved (fixed in 215-1)
trixie: resolved (fixed in 215-1)
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00044.htmlhttp://lists.opensuse.org/opensuse-updates/2016-05/msg00109.htmlhttp://www.openwall.com/lists/oss-security/2016/04/08/14http://www.openwall.com/lists/oss-security/2016/04/08/15https://bugzilla.suse.com/show_bug.cgi?id=972612https://github.com/systemd/systemd/commit/afae249efa4774c6676738ac5de6aeb4daf4889fhttp://lists.opensuse.org/opensuse-security-announce/2016-04/msg00044.htmlhttp://lists.opensuse.org/opensuse-updates/2016-05/msg00109.htmlhttp://www.openwall.com/lists/oss-security/2016/04/08/14http://www.openwall.com/lists/oss-security/2016/04/08/15https://bugzilla.suse.com/show_bug.cgi?id=972612https://github.com/systemd/systemd/commit/afae249efa4774c6676738ac5de6aeb4daf4889f
2016-04-20
Published