In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a logger -p emerg command is executed, if ForwardToWall=yes is set.
Weakness
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Systemd | Systemd_project | 259 (including) | 259 (including) |
| Red Hat Hardened Images | RedHat | systemd-main-260.1-2.1.hum1 | * |
| Systemd | Ubuntu | esm-infra/xenial | * |