CVE-2018-15686
CVE-2018-15686 · systemd: reexec state injection: fgets() on overlong lines leads to line splitting
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.
CVSS 7.0 · High · EPSS 2.3% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
systemd
- Versions
- ≥ unspecified, ≤ 239: Affected (custom)
No fix published
systemd Debian:12
- Affected ranges
- ECOSYSTEM: < 239-12
Update to 239-12
systemd Debian:13
- Affected ranges
- ECOSYSTEM: < 239-12
Update to 239-12
systemd Debian:14
- Affected ranges
- ECOSYSTEM: < 239-12
Update to 239-12
systemd Ubuntu:16.04:LTS
- Versions
- 225-1ubuntu9
- 227-2ubuntu1
- 227-2ubuntu2
- 228-1ubuntu2
- 228-2ubuntu1
- 228-2ubuntu2
- 228-3ubuntu1
- 228-4ubuntu1
- 228-4ubuntu2
- 228-5ubuntu1
- 228-5ubuntu2
- 228-5ubuntu3
- 228-6ubuntu1
- 229-1ubuntu2
- 229-1ubuntu4
- 229-2ubuntu1
- 229-3ubuntu1
- 229-3ubuntu2
- 229-4ubuntu1
- 229-4ubuntu4
- 229-4ubuntu5
- 229-4ubuntu6
- 229-4ubuntu7
- 229-4ubuntu8
- 229-4ubuntu10
- 229-4ubuntu11
- 229-4ubuntu12
- 229-4ubuntu13
- 229-4ubuntu16
- 229-4ubuntu17
- 229-4ubuntu19
- 229-4ubuntu20
- 229-4ubuntu21
- 229-4ubuntu21.1
- 229-4ubuntu21.2
- 229-4ubuntu21.3
- 229-4ubuntu21.4
- 229-4ubuntu21.5
- 229-4ubuntu21.6
- Affected ranges
- ECOSYSTEM: < 229-4ubuntu21.8
Update to 229-4ubuntu21.8
systemd Ubuntu:18.04:LTS
- Versions
- 234-2ubuntu12
- 235-2ubuntu3
- 235-3ubuntu2
- 235-3ubuntu3
- 237-3ubuntu3
- 237-3ubuntu4
- 237-3ubuntu6
- 237-3ubuntu7
- 237-3ubuntu8
- 237-3ubuntu10
- 237-3ubuntu10.2
- 237-3ubuntu10.3
- 237-3ubuntu10.4
- Affected ranges
- ECOSYSTEM: < 237-3ubuntu10.6
Update to 237-3ubuntu10.6
Original sources
- https://security.gentoo.org/glsa/201810-10
- https://lists.debian.org/debian-lts-announce/2018/11/msg00017.html
- http://www.securityfocus.com/bid/105747
- https://www.exploit-db.com/exploits/45714/
- https://usn.ubuntu.com/3816-1/
- https://access.redhat.com/errata/RHSA-2019:2091
- https://access.redhat.com/errata/RHSA-2019:3222
- https://access.redhat.com/errata/RHSA-2020:0593
- https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://github.com/systemd/systemd/pull/10519
- https://nvd.nist.gov/vuln/detail/CVE-2018-15686