← Back

CVE-2018-20839

nvd nist
Published: May 17, 2019Modified: May 5, 2025

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 0.7 / Impact: 3.6
Source: NVD

Description

systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.

Affected (4)

Systemd Project
1 product
Systemd
Netapp
3 products
Cn1610 Firmware
Snapprotect
Solidfire & Hci Management Node
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Systemd
Version 242
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cn1610 Firmware
All versions
Running on/withPlatform Versions
Netapp
Cn1610
All versions
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Snapprotect
All versions
Solidfire & Hci Management Node
All versions

References (12)

Source: cve@mitre.org
Broken LinkThird Party AdvisoryVDB Entry
Source: cve@mitre.org
Issue TrackingThird Party Advisory
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Issue TrackingPatch
Source: cve@mitre.org
Mailing List
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.