CVE-2023-31437
published 2023-06-13CVE-2023-31437: An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are…
PriorityP425medium5.3CVSS 3.1
AVNACLPRNUINSUCNILAN
EPSS
0.34%
27.2th percentile
An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | systemd | — | — |
| systemd_project | systemd | — | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
osv5.3MEDIUM
vendor_debian5.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-31437: An issue was discovered in systemd 253
osv·2023-06-13·CVSS 5.3
CVE-2023-31437 [MEDIUM] CVE-2023-31437: An issue was discovered in systemd 253
An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
GHSA
GHSA-9mv8-4v9g-hm48: An issue was discovered in systemd 253
ghsa_unreviewed·2023-06-13
CVE-2023-31437 [MEDIUM] CWE-354 GHSA-9mv8-4v9g-hm48: An issue was discovered in systemd 253
An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed.
Debian
CVE-2023-31437: systemd - An issue was discovered in systemd 253. An attacker can modify a sealed log file...
vendor_debian·2023·CVSS 5.3
CVE-2023-31437 [MEDIUM] CVE-2023-31437: systemd - An issue was discovered in systemd 253. An attacker can modify a sealed log file...
An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not all existing and sealed log messages are displayed. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/kastel-security/Journaldhttps://github.com/kastel-security/Journald/blob/main/journald-publication.pdfhttps://github.com/systemd/systemd/releaseshttps://github.com/kastel-security/Journaldhttps://github.com/kastel-security/Journald/blob/main/journald-publication.pdfhttps://github.com/systemd/systemd/releases
2023-06-13
Published