CVE-2018-20839 : systemd 242 changes the VT1 mode upon a logout, which allows attackers to read c

systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.

Published 2019-05-17 04:29:01

Updated 2022-02-20 06:10:26

Source MITRE

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2018-20839

Netapp » Cn1610 Firmware » Version: N/A
cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Netapp » Cn1610 » Version: N/A
Netapp » Snapprotect » Version: N/A
cpe:2.3:a:netapp:snapprotect:-:*:*:*:*:*:*:*
Matching versions
Netapp » Solidfire & Hci Management Node » Version: N/A
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
Matching versions
Systemd Project » Systemd » Version: 242
cpe:2.3:a:systemd_project:systemd:242:-:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2018-20839

EPSS FAQ

1.63%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 88 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-20839

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-20839

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-20839

https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1803993

Bug #1803993 “Password appears on the VT1 screen” : Bugs : systemd package : Ubuntu
Issue Tracking;Third Party Advisory
https://github.com/systemd/systemd/commit/9725f1a10f80f5e0ae7d9b60547458622aeb322f

Merge pull request #12378 from rbalint/vt-kbd-reset-check · systemd/systemd@9725f1a · GitHub
Patch;Third Party Advisory
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E

[jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar - Pony Mail
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/108389

systemd CVE-2018-20839 Information Disclosure Vulnerability
Third Party Advisory;VDB Entry
https://security.netapp.com/advisory/ntap-20190530-0002/

CVE-2018-20839 Systemd Vulnerability in NetApp Products | NetApp Product Security
Patch;Third Party Advisory
https://github.com/systemd/systemd/pull/12378

VT kbd reset check by rbalint · Pull Request #12378 · systemd/systemd · GitHub
Third Party Advisory

Jump to

Vulnerability Details : CVE-2018-20839

Products affected by CVE-2018-20839

Exploit prediction scoring system (EPSS) score for CVE-2018-20839

CVSS scores for CVE-2018-20839

CWE ids for CVE-2018-20839

References for CVE-2018-20839