Skip to content
OpenAdvisories
High ALAS2-2019-1160 1 CVE

Important: systemd security update (Amazon Linux 2)

Published Feb 13, 2019 · Updated Sep 23, 2025

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-15688: It was discovered that systemd-network does not correctly keep track of a buffer size when constructing DHCPv6 packets. This flaw may lead to an integer underflow that can be used to produce an heap-based buffer overflow. A malicious host on the same network segment as the victim's one may advertise itself as a DHCPv6 server and exploit this flaw to cause a Denial of Service or potentially gain code execution on the victim's machine. 1639067: CVE-2018-15688 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling

Fixed packages 11

ReleasePackageFixed in
Amazon Linux · 2 libgudev1 0:219-57.amzn2.0.8
Amazon Linux · 2 libgudev1-devel 0:219-57.amzn2.0.8
Amazon Linux · 2 systemd 0:219-57.amzn2.0.8
Amazon Linux · 2 systemd-debuginfo 0:219-57.amzn2.0.8
Amazon Linux · 2 systemd-devel 0:219-57.amzn2.0.8
Amazon Linux · 2 systemd-journal-gateway 0:219-57.amzn2.0.8
Amazon Linux · 2 systemd-libs 0:219-57.amzn2.0.8
Amazon Linux · 2 systemd-networkd 0:219-57.amzn2.0.8
Amazon Linux · 2 systemd-python 0:219-57.amzn2.0.8
Amazon Linux · 2 systemd-resolved 0:219-57.amzn2.0.8
Amazon Linux · 2 systemd-sysv 0:219-57.amzn2.0.8

Vulnerabilities 1

  • High 8.8

    Out-of-Bounds write in systemd-networkd dhcpv6 option handling

    A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-15688.html