Summary
Karim Hossen & Thomas Imbert and Nelson William Gamazo Sanchez
independently discovered that systemd-resolved incorrectly handled certain
DNS responses. A remote attacker could possibly use this issue to cause
systemd to temporarily stop responding, resulting in a denial of service.
This issue only affected Ubuntu 16.04 LTS. (CVE-2017-15908)
It was discovered that systemd incorrectly handled automounted volumes. A
local attacker could possibly use this issue to cause applications to hang,
resulting in a denial of service. (CVE-2018-1049)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | systemd | 204-5ubuntu20.26 |
| Ubuntu · 16.04 LTS 16.04:LTS | systemd | 229-4ubuntu21.1 |
Vulnerabilities 2
-
Unscored —CVE-2017-15908 EPSS 24%
In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger a…
-
Unscored —CVE-2018-1049 Public exploit
In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from k…