CVE-2018-20839

systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.

Score
CVSS 3.1 4.3 Medium
Status
Analyzed - cve@mitre.org
Published
2019-05-17
Last modified
2024-08-05

Affected products

References

 
 
© AVABIS GmbH privacypolicy about