The version of systemd installed on the remote host is prior to 219-78. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1647 advisory.

    It was discovered that systemd is vulnerable to a state injection attack when deserializing the state of a     service. Properties longer than LINE_MAX are not correctly parsed and an attacker may abuse this flaw in     particularly configured services to inject, change, or corrupt the service state. (CVE-2018-15686)

    An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate     with a colon ':'. A local attacker can use this flaw to disclose process memory data. (CVE-2018-16866)

    A memory leak was discovered in the systemd-login when a power-switch event is received. A physical     attacker may trigger one of these events and leak bytes due to a missing free. (CVE-2019-20386)

    A memory leak was discovered in the backport of fixes forCVE-2018-16864in Red Hat Enterprise Linux.
    Function dispatch_message_real() in journald-server.c does not free the memory allocated by     set_iovec_field_free() to store the `_CMDLINE=` entry. A local attacker may use this flaw to make systemd-     journald crash. (CVE-2019-3815)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : systemd (ALAS-2021-1647)

high Nessus Plugin ID 150993

Version 1.7

Version 1.5

Version 1.7 Dec 17, 2024, 9:25 AM Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202412170925
Version 1.5 Dec 12, 2023, 3:08 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") CVSSv3 score source (set to "CVE-2018-16864") Plugin Feed: 202312121508