CVE-2018-20839
EUVD-2018-1337917.05.2019, 04:29
systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| netapp | cn1610_firmware | - |
| netapp | snapprotect | - |
| netapp | solidfire_\&_hci_management_node | - |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References