Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-15688: It was discovered that systemd-network does not correctly keep track of a buffer size when constructing DHCPv6 packets. This flaw may lead to an integer underflow that can be used to produce an heap-based buffer overflow. A malicious host on the same network segment as the victim's one may advertise itself as a DHCPv6 server and exploit this flaw to cause a Denial of Service or potentially gain code execution on the victim's machine. 1639067: CVE-2018-15688 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libgudev1 | 0:219-57.amzn2.0.8 |
| Amazon Linux · 2 | libgudev1-devel | 0:219-57.amzn2.0.8 |
| Amazon Linux · 2 | systemd | 0:219-57.amzn2.0.8 |
| Amazon Linux · 2 | systemd-debuginfo | 0:219-57.amzn2.0.8 |
| Amazon Linux · 2 | systemd-devel | 0:219-57.amzn2.0.8 |
| Amazon Linux · 2 | systemd-journal-gateway | 0:219-57.amzn2.0.8 |
| Amazon Linux · 2 | systemd-libs | 0:219-57.amzn2.0.8 |
| Amazon Linux · 2 | systemd-networkd | 0:219-57.amzn2.0.8 |
| Amazon Linux · 2 | systemd-python | 0:219-57.amzn2.0.8 |
| Amazon Linux · 2 | systemd-resolved | 0:219-57.amzn2.0.8 |
| Amazon Linux · 2 | systemd-sysv | 0:219-57.amzn2.0.8 |
Vulnerabilities 1
-
High 8.8
Out-of-Bounds write in systemd-networkd dhcpv6 option handling
A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-15688.html