CVE:CVE-2018-16866
CNNVD:CNNVD-201901-416
systemd是德国Lennart Poettering个人开发者的一款基于Linux的系统和服务管理器。该产品兼容了SysV和LSB的启动脚本，且提供了一个用来表示系统服务间依赖关系的框架。systemd-journald是其中的一个用于收集和存储日志数据的系统服务。
systemd-journald v221版本至v239版本存在缓冲区错误漏洞。本地攻击者利用该漏洞泄露进程内存数据。
solution:Upgrade systemd_project systemd to a higher version than 239,and avoid the version [221,239]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,and avoid the version 16.04,18.04,18.10; Upgrade netapp active_iq_performance_analytics_services to a higher version than -; Upgrade netapp element_software to a higher version than *; Upgrade redhat enterprise_linux to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_compute_node_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_for_ibm_z_systems_(structure_a) to a higher version than 7_s390x,and avoid the version 7_s390x; Upgrade redhat enterprise_linux_for_ibm_z_systems_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_for_power_big_endian to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_for_power_big_endian_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_for_power_little_endian_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_for_scientific_computing to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0