CVE-2015-8842 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-8842 Interim 1 22 2025-04-13T23:12:42Z current 2021-05-30T13:36:09Z 2025-04-13T23:12:42Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-8842 tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2016-May/002070.html E-Mail link for SUSE-SU-2016:1346-1 https://lists.suse.com/pipermail/sle-security-updates/2016-May/002071.html E-Mail link for SUSE-SU-2016:1351-1 https://lists.suse.com/pipermail/sle-security-updates/2017-October/003288.html E-Mail link for SUSE-SU-2017:2699-1 https://lists.suse.com/pipermail/sle-security-updates/2017-October/003290.html E-Mail link for SUSE-SU-2017:2700-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2DQEDLIIIDITTGGOGFN6BTPB2HYBHL7V/#2DQEDLIIIDITTGGOGFN6BTPB2HYBHL7V E-Mail link for openSUSE-SU-2016:1101-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 12 libgudev-1_0-0-210-104.1 libgudev-1_0-0-210-70.48.1 libgudev-1_0-0-32bit-210-104.1 libgudev-1_0-0-32bit-210-70.48.1 libgudev-1_0-devel-210-104.1 libgudev-1_0-devel-210-70.48.1 libudev-devel-210-104.1 libudev-devel-210-70.48.1 libudev1-210-104.1 libudev1-210-70.48.1 libudev1-32bit-210-104.1 libudev1-32bit-210-70.48.1 sles12-docker-image-1.1.4-20171002 sles12sp1-docker-image-1.0.7-20171002 systemd-210-104.1 systemd-210-70.48.1 systemd-32bit-210-104.1 systemd-32bit-210-70.48.1 systemd-bash-completion-210-104.1 systemd-bash-completion-210-70.48.1 systemd-devel-210-104.1 systemd-devel-210-70.48.1 systemd-sysvinit-210-104.1 systemd-sysvinit-210-70.48.1 typelib-1_0-GUdev-1_0-210-104.1 typelib-1_0-GUdev-1_0-210-70.48.1 udev-210-104.1 udev-210-70.48.1 libgudev-1_0-0-210-70.48.1 as a component of SUSE Linux Enterprise Desktop 12 libgudev-1_0-0-32bit-210-70.48.1 as a component of SUSE Linux Enterprise Desktop 12 libudev1-210-70.48.1 as a component of SUSE Linux Enterprise Desktop 12 libudev1-32bit-210-70.48.1 as a component of SUSE Linux Enterprise Desktop 12 systemd-210-70.48.1 as a component of SUSE Linux Enterprise Desktop 12 systemd-32bit-210-70.48.1 as a component of SUSE Linux Enterprise Desktop 12 systemd-bash-completion-210-70.48.1 as a component of SUSE Linux Enterprise Desktop 12 systemd-sysvinit-210-70.48.1 as a component of SUSE Linux Enterprise Desktop 12 udev-210-70.48.1 as a component of SUSE Linux Enterprise Desktop 12 libgudev-1_0-0-210-104.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libgudev-1_0-0-32bit-210-104.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libudev1-210-104.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 libudev1-32bit-210-104.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 systemd-210-104.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 systemd-32bit-210-104.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 systemd-bash-completion-210-104.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 systemd-sysvinit-210-104.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 udev-210-104.1 as a component of SUSE Linux Enterprise Desktop 12 SP1 sles12-docker-image-1.1.4-20171002 as a component of SUSE Linux Enterprise Module for Containers 12 sles12sp1-docker-image-1.0.7-20171002 as a component of SUSE Linux Enterprise Module for Containers 12 libgudev-1_0-0-210-70.48.1 as a component of SUSE Linux Enterprise Server 12 libgudev-1_0-0-32bit-210-70.48.1 as a component of SUSE Linux Enterprise Server 12 libudev1-210-70.48.1 as a component of SUSE Linux Enterprise Server 12 libudev1-32bit-210-70.48.1 as a component of SUSE Linux Enterprise Server 12 systemd-210-70.48.1 as a component of SUSE Linux Enterprise Server 12 systemd-32bit-210-70.48.1 as a component of SUSE Linux Enterprise Server 12 systemd-bash-completion-210-70.48.1 as a component of SUSE Linux Enterprise Server 12 systemd-sysvinit-210-70.48.1 as a component of SUSE Linux Enterprise Server 12 udev-210-70.48.1 as a component of SUSE Linux Enterprise Server 12 libgudev-1_0-0-210-104.1 as a component of SUSE Linux Enterprise Server 12 SP1 libgudev-1_0-0-32bit-210-104.1 as a component of SUSE Linux Enterprise Server 12 SP1 libudev1-210-104.1 as a component of SUSE Linux Enterprise Server 12 SP1 libudev1-32bit-210-104.1 as a component of SUSE Linux Enterprise Server 12 SP1 systemd-210-104.1 as a component of SUSE Linux Enterprise Server 12 SP1 systemd-32bit-210-104.1 as a component of SUSE Linux Enterprise Server 12 SP1 systemd-bash-completion-210-104.1 as a component of SUSE Linux Enterprise Server 12 SP1 systemd-sysvinit-210-104.1 as a component of SUSE Linux Enterprise Server 12 SP1 udev-210-104.1 as a component of SUSE Linux Enterprise Server 12 SP1 libgudev-1_0-0-210-70.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libgudev-1_0-0-32bit-210-70.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libudev1-210-70.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libudev1-32bit-210-70.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 systemd-210-70.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 systemd-32bit-210-70.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 systemd-bash-completion-210-70.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 systemd-sysvinit-210-70.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 udev-210-70.48.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libgudev-1_0-0-210-104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libgudev-1_0-0-32bit-210-104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libudev1-210-104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libudev1-32bit-210-104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 systemd-210-104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 systemd-32bit-210-104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 systemd-bash-completion-210-104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 systemd-sysvinit-210-104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 udev-210-104.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 libgudev-1_0-devel-210-70.48.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libudev-devel-210-70.48.1 as a component of SUSE Linux Enterprise Software Development Kit 12 systemd-devel-210-70.48.1 as a component of SUSE Linux Enterprise Software Development Kit 12 typelib-1_0-GUdev-1_0-210-70.48.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libgudev-1_0-devel-210-104.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libudev-devel-210-104.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 systemd-devel-210-104.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 typelib-1_0-GUdev-1_0-210-104.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 tmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m/system.journal, which allows local users to obtain sensitive information by reading the file. CVE-2015-8842 SUSE Linux Enterprise Desktop 12:libgudev-1_0-0-210-70.48.1 SUSE Linux Enterprise Desktop 12:libgudev-1_0-0-32bit-210-70.48.1 SUSE Linux Enterprise Desktop 12:libudev1-210-70.48.1 SUSE Linux Enterprise Desktop 12:libudev1-32bit-210-70.48.1 SUSE Linux Enterprise Desktop 12:systemd-210-70.48.1 SUSE Linux Enterprise Desktop 12:systemd-32bit-210-70.48.1 SUSE Linux Enterprise Desktop 12:systemd-bash-completion-210-70.48.1 SUSE Linux Enterprise Desktop 12:systemd-sysvinit-210-70.48.1 SUSE Linux Enterprise Desktop 12:udev-210-70.48.1 SUSE Linux Enterprise Desktop 12 SP1:libgudev-1_0-0-210-104.1 SUSE Linux Enterprise Desktop 12 SP1:libgudev-1_0-0-32bit-210-104.1 SUSE Linux Enterprise Desktop 12 SP1:libudev1-210-104.1 SUSE Linux Enterprise Desktop 12 SP1:libudev1-32bit-210-104.1 SUSE Linux Enterprise Desktop 12 SP1:systemd-210-104.1 SUSE Linux Enterprise Desktop 12 SP1:systemd-32bit-210-104.1 SUSE Linux Enterprise Desktop 12 SP1:systemd-bash-completion-210-104.1 SUSE Linux Enterprise Desktop 12 SP1:systemd-sysvinit-210-104.1 SUSE Linux Enterprise Desktop 12 SP1:udev-210-104.1 SUSE Linux Enterprise Module for Containers 12:sles12-docker-image-1.1.4-20171002 SUSE Linux Enterprise Module for Containers 12:sles12sp1-docker-image-1.0.7-20171002 SUSE Linux Enterprise Server 12:libgudev-1_0-0-210-70.48.1 SUSE Linux Enterprise Server 12:libgudev-1_0-0-32bit-210-70.48.1 SUSE Linux Enterprise Server 12:libudev1-210-70.48.1 SUSE Linux Enterprise Server 12:libudev1-32bit-210-70.48.1 SUSE Linux Enterprise Server 12:systemd-210-70.48.1 SUSE Linux Enterprise Server 12:systemd-32bit-210-70.48.1 SUSE Linux Enterprise Server 12:systemd-bash-completion-210-70.48.1 SUSE Linux Enterprise Server 12:systemd-sysvinit-210-70.48.1 SUSE Linux Enterprise Server 12:udev-210-70.48.1 SUSE Linux Enterprise Server 12 SP1:libgudev-1_0-0-210-104.1 SUSE Linux Enterprise Server 12 SP1:libgudev-1_0-0-32bit-210-104.1 SUSE Linux Enterprise Server 12 SP1:libudev1-210-104.1 SUSE Linux Enterprise Server 12 SP1:libudev1-32bit-210-104.1 SUSE Linux Enterprise Server 12 SP1:systemd-210-104.1 SUSE Linux Enterprise Server 12 SP1:systemd-32bit-210-104.1 SUSE Linux Enterprise Server 12 SP1:systemd-bash-completion-210-104.1 SUSE Linux Enterprise Server 12 SP1:systemd-sysvinit-210-104.1 SUSE Linux Enterprise Server 12 SP1:udev-210-104.1 SUSE Linux Enterprise Server for SAP Applications 12:libgudev-1_0-0-210-70.48.1 SUSE Linux Enterprise Server for SAP Applications 12:libgudev-1_0-0-32bit-210-70.48.1 SUSE Linux Enterprise Server for SAP Applications 12:libudev1-210-70.48.1 SUSE Linux Enterprise Server for SAP Applications 12:libudev1-32bit-210-70.48.1 SUSE Linux Enterprise Server for SAP Applications 12:systemd-210-70.48.1 SUSE Linux Enterprise Server for SAP Applications 12:systemd-32bit-210-70.48.1 SUSE Linux Enterprise Server for SAP Applications 12:systemd-bash-completion-210-70.48.1 SUSE Linux Enterprise Server for SAP Applications 12:systemd-sysvinit-210-70.48.1 SUSE Linux Enterprise Server for SAP Applications 12:udev-210-70.48.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libgudev-1_0-0-210-104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libgudev-1_0-0-32bit-210-104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libudev1-210-104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:libudev1-32bit-210-104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:systemd-210-104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:systemd-32bit-210-104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:systemd-bash-completion-210-104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:systemd-sysvinit-210-104.1 SUSE Linux Enterprise Server for SAP Applications 12 SP1:udev-210-104.1 SUSE Linux Enterprise Software Development Kit 12:libgudev-1_0-devel-210-70.48.1 SUSE Linux Enterprise Software Development Kit 12:libudev-devel-210-70.48.1 SUSE Linux Enterprise Software Development Kit 12:systemd-devel-210-70.48.1 SUSE Linux Enterprise Software Development Kit 12:typelib-1_0-GUdev-1_0-210-70.48.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libgudev-1_0-devel-210-104.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libudev-devel-210-104.1 SUSE Linux Enterprise Software Development Kit 12 SP1:systemd-devel-210-104.1 SUSE Linux Enterprise Software Development Kit 12 SP1:typelib-1_0-GUdev-1_0-210-104.1 moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N