CVE-2023-31438
An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then...
An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
- Record
CVE-2023-31438- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-354
- Updated
- 2026-11-02
CVE List No score
An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
- Record
CVE-2023-31438- Updated
- 2026-11-02
EUVDEUVD-2023-35746 No score
An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
- Record
EUVD-2023-35746- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m3qw-f5f6-m6r3
An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then...
An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications.
- Record
GHSA-m3qw-f5f6-m6r3- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-354
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-31438
An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
- Record
DEBIAN-CVE-2023-31438- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSV No score
An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."
- Record
CVE-2023-31438- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
systemdDebian:12 |
All versions, plus listed versions 252.11-1252.11-1~deb12u1252.12-1~deb12u1252.14-1~deb12u1252.16-1~deb12u1 Show 45 moreShow less252.17-1~deb12u1252.18-1~deb12u1252.19-1~deb12u1252.20-1~deb12u1252.21-1~deb12u1252.22-1~deb12u1252.23-1~deb12u1252.24-1~deb12u1252.25-1~deb12u1252.26-1~deb12u1252.26-1~deb12u2252.26-1~deb12u2~bpo11+1252.27-1~deb12u1252.28-1~deb12u1252.29-1~deb12u1252.29-1~deb12u1~bpo11+1252.30-1~deb12u1252.30-1~deb12u2252.31-1~deb12u1252.32-1~deb12u1252.33-1~deb12u1252.36-1~deb12u1252.38-1~deb12u1252.39-1~deb12u1252.39-1~deb12u2252.6-1252.6-1+loong64253-1253-2253-3253-4253.5-1253~rc2-1253~rc3-1254-1254.1-1254.1-2254.1-3254.14-1~bpo12+1254.15-1~bpo12+1254.16-1~bpo12+1254.22-1~bpo12+1254.26-1~bpo12+1254.3-1254.4-1 |
None known |
systemdDebian:13 |
All versions, plus listed versions 257.13-1~deb13u1257.7-1257.8-1~deb13u1257.8-1~deb13u2257.9-1~deb13u1 Show 36 moreShow less258-1258.1-1258.1-2258~rc1-1258~rc2-1258~rc2-2258~rc3-1258~rc4-1259-1259.1-1259~rc1-1259~rc2-1259~rc3-1260-1260.1-1260~rc1-1260~rc1-2260~rc2-1260~rc3-1260~rc4-1261-1261-2261.1-1261.1-2261.1-3261.2-1261~rc1-1261~rc2-1261~rc3-1261~rc4-1262-1262.1-1262~rc1-1262~rc1-2262~rc2-1262~rc3-1 |
None known |
systemdDebian:14 |
All versions, plus listed versions 257.13-1~deb13u1257.7-1257.8-1~deb13u1257.8-1~deb13u2257.9-1~deb13u1 Show 36 moreShow less258-1258.1-1258.1-2258~rc1-1258~rc2-1258~rc2-2258~rc3-1258~rc4-1259-1259.1-1259~rc1-1259~rc2-1259~rc3-1260-1260.1-1260~rc1-1260~rc1-2260~rc2-1260~rc3-1260~rc4-1261-1261-2261.1-1261.1-2261.1-3261.2-1261~rc1-1261~rc2-1261~rc3-1261~rc4-1262-1262.1-1262~rc1-1262~rc1-2262~rc2-1262~rc3-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-31438 is a medium vulnerability (CVSS 5.3) in Systemd Project Systemd, published June 13, 2023. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 25th percentile.
References
github.com/systemd/systemd/releases
nvd.nist.gov/vuln/detail/CVE-2023-31438
security-tracker.debian.org/tracker/CVE-2023-31438
Left out here: 139 versions. The JSON record has them.