CVE-2013-4391
Fixed in a distro release EPSS 5%
Integer overflow in the valid_user_field function in journal/journald-native.c in systemd allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large journal data field, which triggers a heap-based buffer overflow.
Products: systemd_project systemd, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | systemd | 204-5 |
| Debian 13 | systemd | 204-5 |
| Debian 14 | systemd | 204-5 |
| Debian 7 | systemd | 44-11+deb7u4 |