Skip to content
OpenAdvisories
High RHSA-2020:1264 2 CVEs

Red Hat Security Advisory: systemd security and bug fix update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 22

ReleasePackageFixed in
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::computenode libgudev1 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::computenode libgudev1-devel 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::computenode systemd 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::computenode systemd-debuginfo 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::computenode systemd-devel 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::computenode systemd-journal-gateway 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::computenode systemd-libs 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::computenode systemd-networkd 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::computenode systemd-python 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::computenode systemd-resolved 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::computenode systemd-sysv 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::server libgudev1 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::server libgudev1-devel 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::server systemd 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::server systemd-debuginfo 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::server systemd-devel 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::server systemd-journal-gateway 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::server systemd-libs 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::server systemd-networkd 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::server systemd-python 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::server systemd-resolved 0:219-57.el7_5.9
Red Hat · RHEL 7.5 EUS rhel_eus:7.5::server systemd-sysv 0:219-57.el7_5.9

Vulnerabilities 2

  • High 7.0
    CVE-2018-15686 Public exploit

    systemd: reexec state injection: fgets() on overlong lines leads to line splitting

    A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected relea…

    systemd systemd systemd systemd Debian Ubuntu
  • Medium 4.3
    CVE-2018-16866

    An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon …

    The systemd Project systemd systemd systemd Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1639071
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1653867
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1798160
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1264.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-15686
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-15686
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-15686
  • report
    https://access.redhat.com/security/cve/CVE-2018-16866
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-16866
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-16866
  • article
    https://www.qualys.com/2019/01/09/system-down/system-down.txt