Description
An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Systemd | Canonical Ubuntu 20.04 LTS, Systemd 245 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | systemd | 249.4-2 | — |
| Debian 13 | systemd | 249.4-2 | — |
| Debian 12 | systemd | 249.4-2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | systemd | 245.4-4ubuntu3.10 | USN-5013-1 |
| Ubuntu 18.04 LTS | systemd | 237-3ubuntu10.49 | USN-5013-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | systemd | 229-4ubuntu21.31+esm1 | USN-5013-2 |
| Ubuntu Pro 14.04 LTS | systemd | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | NetworkManager +14 | 1:1.32.10-4.el8 | RHSA-2021:4361 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | NetworkManager-cloud-setup +1 | 1:1.32.10-4.el8 | ALSA-2021:4361 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | NetworkManager | 1:1.32.10-4.el8 | RLSA-2021:4361 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP3 | systemd | 246.15-7.11.1 | SUSE-SU-2021:2809-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | NetworkManager | 1.32.10-2.1 | openSUSE-SU-2024:10602-1 |
| openSUSE Tumbleweed | systemd | 249.4-2.2 | openSUSE-SU-2024:11420-1 |
| openSUSE Leap 15.3 | systemd | 246.15-7.11.1 | openSUSE-SU-2021:2809-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | systemd +9 | 219-78.amzn2.0.20 | ALAS2-2022-1854 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | NetworkManager +14 | 1:1.32.10-4.0.1.el8 | ELSA-2021-4361 |
Advisories 14
- ALSA-2021:4361 Moderate: NetworkManager security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2021:4361 Red Hat Security Advisory: NetworkManager security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- SSA-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 Siemens ProductCERT · Oct 13, 2026
- USN-5013-2 systemd vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- USN-5013-1 systemd vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- RLSA-2021:4361 Moderate: NetworkManager security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- SUSE-SU-2021:2809-1 Security update for systemd SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10602-1 NetworkManager-1.32.10-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11420-1 libsystemd0-249.4-2.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:2809-1 Security update for systemd SUSE / openSUSE Security Updates · Feb 4, 2026
- ICSA-23-348-10 Siemens SIMATIC S7-1500 CISA ICS & IT advisories · Aug 12, 2025
- WID-SEC-2022-1660 systemd: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Feb 17, 2025
- ALAS2-2022-1854 Important: systemd security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 10, 2022
- ELSA-2021-4361 Moderate: NetworkManager security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 16, 2021
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142
- GLSA-202107-48 vendor-advisory
- FEDORA-2021-166e461c8d vendor-advisory
- [oss-security] 20210804 Re: Pop!_OS Membership to linux-distros list mailing-list
- [oss-security] 20210817 Re: Pop!_OS Membership to linux-distros list mailing-list
- [oss-security] 20210907 Re: Pop!_OS Membership to linux-distros list mailing-list
- https://security.netapp.com/advisory/ntap-20210625-0005/