Medium severity · published May 17, 2019
CVE-2018-20839
systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and…
4.3
CVSS
2.5%
EPSS
No
On KEV
Description
systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cn1610 Firmware · Netapp
All versions, or not specified · source: NVD
SN
Snapprotect · Netapp
All versions, or not specified · source: NVD
SH
Solidfire & Hci Management Node · Netapp
All versions, or not specified · source: NVD
SY
Systemd · Systemd Project
242 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-20839
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-20839
Broken Link
http://www.securityfocus.com/bid/108389
Issue Tracking
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1803993
Patch
https://github.com/systemd/systemd/commit/9725f1a10f80f5e0ae7d9b60547458622aeb322f
Issue Tracking
https://github.com/systemd/systemd/pull/12378
Mailing List
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190530-0002/
More from Cn1610 Firmware
9.8
CVE-2019-10126
A flaw was found in the Linux kernel
9.8
CVE-2019-10125
An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4
8.8
CVE-2019-3846
A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network
8.1
CVE-2019-11815
An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8
7.8
CVE-2019-3844
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned…