Skip to content
OpenAdvisories

Vendor

systemd

14 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.8
    CVE-2018-15687 Public exploit

    systemd: chown_one() can dereference symlinks

    A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files. Affected releases are systemd versions up to and including 239.

  • High 7.0
    CVE-2018-15686 Public exploit

    systemd: reexec state injection: fgets() on overlong lines leads to line splitting

    A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected relea…