Improper Validation of Integrity Check Value Affecting systemd package, versions *
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIAN11-SYSTEMD-5733392
- published 22 Jun 2023
- disclosed 13 Jun 2023
Introduced: 13 Jun 2023
CVE-2023-31439 Open this link in a new tabHow to fix?
There is no fixed version for Debian:11 systemd.
NVD Description
Note: Versions mentioned in the description apply only to the upstream systemd package and not the systemd package as distributed by Debian.
See How to fix? for Debian:11 relevant fixed versions and status.
An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."