CVE-2013-4391
Debian Security Advisory 2777-1
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
Integer overflow in the valid_user_field function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow.
Desbordamiento de enteros en la función valid_user_field de journal/journald-native.c en systemd permite a atacantes remotos ocasionar una denegación de servicio (cuelgue) y posiblemente ejecutar código arbitrario a través de un gran campo de datos, que provoca un desbordamiento de buffer basado en heap.
Multiple security issues in systemd have been discovered by Sebastian to the bypass of Policykit restrictions and privilege escalation or denial of service through an integer overflow in journald and missing input sanitising in the processing of X keyboard extension (XKB) files.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2013-06-12 CVE Reserved
- 2013-10-11 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-190: Integer Overflow or Wraparound
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2013/10/01/9 | Mailing List |
|
| URL | Date | SRC |
|---|---|---|
| http://cgit.freedesktop.org/systemd/systemd/commit/?id=505b6a61c22d5565e9308045c7b9bf79f7d0517e | 2024-08-06 |
| URL | Date | SRC |
|---|---|---|
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725357 | 2022-01-31 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=859051 | 2022-01-31 |
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2013/dsa-2777 | 2022-01-31 | |
| https://security.gentoo.org/glsa/201612-34 | 2022-01-31 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Systemd Project Search vendor "Systemd Project" | Systemd Search vendor "Systemd Project" for product "Systemd" | < 190 Search vendor "Systemd Project" for product "Systemd" and version " < 190" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 7.0 Search vendor "Debian" for product "Debian Linux" and version "7.0" | - |
Affected
| ||||||