CVE-2018-20839

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-20839
systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.7 / Impact : 3.6

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://www.securityfocus.com/bid/108389 Broken Link Third Party Advisory VDB Entry
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1803993 Issue Tracking Third Party Advisory
https://github.com/systemd/systemd/commit/9725f1a10f80f5e0ae7d9b60547458622aeb322f Patch
https://github.com/systemd/systemd/pull/12378 Issue Tracking Patch
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E Mailing List
https://security.netapp.com/advisory/ntap-20190530-0002/ Third Party Advisory
http://www.securityfocus.com/bid/108389 Broken Link Third Party Advisory VDB Entry
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1803993 Issue Tracking Third Party Advisory
https://github.com/systemd/systemd/commit/9725f1a10f80f5e0ae7d9b60547458622aeb322f Patch
https://github.com/systemd/systemd/pull/12378 Issue Tracking Patch
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E Mailing List
https://security.netapp.com/advisory/ntap-20190530-0002/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:systemd_project:systemd:242:-:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:cn1610:-:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:netapp:snapprotect:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
History

21 Nov 2024, 04:02

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/108389 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/108389 - Broken Link, Third Party Advisory, VDB Entry
References () https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1803993 - Issue Tracking, Third Party Advisory () https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1803993 - Issue Tracking, Third Party Advisory
References () https://github.com/systemd/systemd/commit/9725f1a10f80f5e0ae7d9b60547458622aeb322f - Patch () https://github.com/systemd/systemd/commit/9725f1a10f80f5e0ae7d9b60547458622aeb322f - Patch
References () https://github.com/systemd/systemd/pull/12378 - Issue Tracking, Patch () https://github.com/systemd/systemd/pull/12378 - Issue Tracking, Patch
References () https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E - Mailing List () https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E - Mailing List
References () https://security.netapp.com/advisory/ntap-20190530-0002/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20190530-0002/ - Third Party Advisory

24 Oct 2024, 17:34

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/108389 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/108389 - Broken Link, Third Party Advisory, VDB Entry
References () https://github.com/systemd/systemd/commit/9725f1a10f80f5e0ae7d9b60547458622aeb322f - Patch, Third Party Advisory () https://github.com/systemd/systemd/commit/9725f1a10f80f5e0ae7d9b60547458622aeb322f - Patch
References () https://github.com/systemd/systemd/pull/12378 - Third Party Advisory () https://github.com/systemd/systemd/pull/12378 - Issue Tracking, Patch
References () https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E - () https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E - Mailing List
References () https://security.netapp.com/advisory/ntap-20190530-0002/ - Patch, Third Party Advisory () https://security.netapp.com/advisory/ntap-20190530-0002/ - Third Party Advisory
CVSS v2 : 4.3
v3 : 9.8 		v2 : 4.3
v3 : 4.3
CWE CWE-200 NVD-CWE-noinfo

07 Nov 2023, 02:56

Type Values Removed Values Added
References
  • {'url': 'https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E', 'name': '[mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MLIST'}
  • () https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E -
Information

Published : 2019-05-17 04:29

Updated : 2024-11-21 04:02

NVD link : CVE-2018-20839

Mitre link : CVE-2018-20839

CVE.ORG link : CVE-2018-20839

JSON object : View

Products Affected

netapp

  • cn1610
  • snapprotect
  • solidfire_\&_hci_management_node
  • cn1610_firmware

systemd_project

  • systemd
CWE
NVD-CWE-noinfo