Skip to content
OpenAdvisories
High RHSA-2020:0593 2 CVEs

Red Hat Security Advisory: systemd security update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 33

ReleasePackageFixed in
Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server libgudev1 0:219-42.el7_4.20
Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server libgudev1-devel 0:219-42.el7_4.20
Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server systemd 0:219-42.el7_4.20
Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server systemd-debuginfo 0:219-42.el7_4.20
Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server systemd-devel 0:219-42.el7_4.20
Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server systemd-journal-gateway 0:219-42.el7_4.20
Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server systemd-libs 0:219-42.el7_4.20
Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server systemd-networkd 0:219-42.el7_4.20
Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server systemd-python 0:219-42.el7_4.20
Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server systemd-resolved 0:219-42.el7_4.20
Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server systemd-sysv 0:219-42.el7_4.20
Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server libgudev1 0:219-42.el7_4.20
Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server libgudev1-devel 0:219-42.el7_4.20
Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server systemd 0:219-42.el7_4.20
Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server systemd-debuginfo 0:219-42.el7_4.20
Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server systemd-devel 0:219-42.el7_4.20
Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server systemd-journal-gateway 0:219-42.el7_4.20
Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server systemd-libs 0:219-42.el7_4.20
Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server systemd-networkd 0:219-42.el7_4.20
Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server systemd-python 0:219-42.el7_4.20
Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server systemd-resolved 0:219-42.el7_4.20
Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server systemd-sysv 0:219-42.el7_4.20
Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server libgudev1 0:219-42.el7_4.20
Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server libgudev1-devel 0:219-42.el7_4.20
Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server systemd 0:219-42.el7_4.20
Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server systemd-debuginfo 0:219-42.el7_4.20
Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server systemd-devel 0:219-42.el7_4.20
Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server systemd-journal-gateway 0:219-42.el7_4.20
Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server systemd-libs 0:219-42.el7_4.20
Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server systemd-networkd 0:219-42.el7_4.20
Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server systemd-python 0:219-42.el7_4.20
Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server systemd-resolved 0:219-42.el7_4.20
Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server systemd-sysv 0:219-42.el7_4.20

Vulnerabilities 2

  • High 7.0
    CVE-2018-15686 Public exploit

    systemd: reexec state injection: fgets() on overlong lines leads to line splitting

    A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected relea…

    systemd systemd systemd systemd Debian Ubuntu
  • Medium 4.3
    CVE-2018-16866

    An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon …

    The systemd Project systemd systemd systemd Debian Ubuntu

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1639071
  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1653867
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0593.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-15686
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-15686
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-15686
  • report
    https://access.redhat.com/security/cve/CVE-2018-16866
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-16866
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-16866
  • article
    https://www.qualys.com/2019/01/09/system-down/system-down.txt