Summary
It was discovered that systemd incorrectly handled certain D-Bus messages.
A local unprivileged attacker could exploit this in order to crash the
init process, resulting in a system denial-of-service (kernel panic).
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | systemd | 229-4ubuntu21.16 |
| Ubuntu · 18.04 LTS 18.04:LTS | systemd | 237-3ubuntu10.13 |
Vulnerabilities 1
-
Unscored —
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a v…
References
-
report
https://ubuntu.com/security/CVE-2019-6454