CVE-2023-31438

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Jun 13, 2023
Updated: Aug 2, 2024
CWE ID 354

Summary

CVE-2023-31438 is a vulnerability affecting systemd version 253. An attacker can manipulate sealed log files by truncating them and then resuming the log sealing process. This allows the attacker to bypass integrity checks, potentially going unnoticed. Despite this finding, the vendor has reportedly denied that this issue constitutes a security vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share