CVE-2023-31438
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Jun 13, 2023
Updated: Aug 2, 2024
CWE ID 354
Summary
CVE-2023-31438 is a vulnerability affecting systemd version 253. An attacker can manipulate sealed log files by truncating them and then resuming the log sealing process. This allows the attacker to bypass integrity checks, potentially going unnoticed. Despite this finding, the vendor has reportedly denied that this issue constitutes a security vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share