CVE-2018-20839

systemd 242 changes the VT1 mode upon a logout, which allows attackers to read cleartext passwords in certain circumstances, such as watching a shutdown, or using Ctrl-Alt-F1 and Ctrl-Alt-F2. This occurs because the KDGKBMODE (aka current keyboard mode) check is mishandled.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
VendorProductVersion
netappcn1610_firmware
-
netappsnapprotect
-
netappsolidfire_\&_hci_management_node
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
plymouth
bullseye
0.9.5-3
fixed
stretch
no-dsa
jessie
no-dsa
bookworm
22.02.122-3
fixed
sid
24.004.60-2
fixed
trixie
24.004.60-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
systemd
jammy
not-affected
impish
not-affected
hirsute
not-affected
groovy
not-affected
focal
not-affected
eoan
ignored
disco
ignored
cosmic
ignored
bionic
not-affected
xenial
not-affected
trusty
not-affected