Skip to content
OpenAdvisories
High USN-3806-1 1 CVE

systemd vulnerability

Published Nov 5, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Felix Wilhelm discovered that the systemd-networkd DHCPv6 client
incorrectly handled certain DHCPv6 messages. In configurations where
systemd-networkd is being used, an attacker on the same network could use
this issue to cause systemd-networkd to crash, resulting in a denial of
service, or possibly execute arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS systemd 229-4ubuntu21.6
Ubuntu · 18.04 LTS 18.04:LTS systemd 237-3ubuntu10.4

Vulnerabilities 1

  • High 8.8
    CVE-2018-15688

    Out-of-Bounds write in systemd-networkd dhcpv6 option handling

    A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.

    systemd systemd systemd systemd Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-15688