Skip to content
OpenAdvisories
High DLA-1580-1 3 CVEs

systemd - security update

Published Nov 19, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 systemd 215-17+deb8u8

Vulnerabilities 3

  • High 8.8
    CVE-2018-15688

    Out-of-Bounds write in systemd-networkd dhcpv6 option handling

    A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.

    systemd systemd systemd systemd Debian Ubuntu
  • High 7.0
    CVE-2018-15686 Public exploit

    systemd: reexec state injection: fgets() on overlong lines leads to line splitting

    A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected relea…

    systemd systemd systemd systemd Debian Ubuntu
  • Unscored —
    CVE-2018-1049 Public exploit

    In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from k…

    Red Hat systemd systemd systemd Debian Ubuntu