CVE-2023-31439

An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then adjust the file such that checking the integrity shows no error, despite modifications. NOTE: the vendor reportedly sent "a reply denying that any of the finding was a security vulnerability."

• CWE-354

• https://github.com/kastel-security/JournaldPatch, Third Party Advisory
• https://github.com/kastel-security/Journald/blob/main/journald-publication.pdfTechnical Description
• https://github.com/systemd/systemd/pull/28885
• https://github.com/systemd/systemd/releasesRelease Notes
• https://github.com/kastel-security/JournaldPatch, Third Party Advisory
• https://github.com/kastel-security/Journald/blob/main/journald-publication.pdfTechnical Description
• https://github.com/systemd/systemd/pull/28885
• https://github.com/systemd/systemd/releasesRelease Notes

Published

Jun 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31433A SQL injection issue in Logbuch in evasys before 8.2 Build …8.8
• CVE-2023-31434The parameters nutzer_titel, nutzer_vn, and nutzer_nn in the…5.4
• CVE-2023-31435Multiple components (such as Onlinetemplate-Verwaltung, List…8.1
• CVE-2023-31436qfq_change_class in net/sched/sch_qfq.c in the Linux kernel …7.8
• CVE-2023-31437An issue was discovered in systemd 253. An attacker can modi…5.3
• CVE-2023-31438An issue was discovered in systemd 253. An attacker can trun…5.3
• CVE-2023-3144A vulnerability classified as problematic was found in Sourc…5.4
• CVE-2023-31441In NATO Communications and Information Agency anet (aka Advi…5.5
• CVE-2023-31442In Lightbend Akka before 2.8.1, the async-dns resolver (used…7.5
• CVE-2023-31444In Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-…7.5
• CVE-2023-31445Cassia Access controller before 2.1.1.2203171453, was discov…5.3
• CVE-2023-31446In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC200…9.8