Red Hat Security Advisory

RHSA-2019:0049

systemd security update

Released 2019-01-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libgudev1-219-62.el7_6.2, systemd-219-62.el7_6.2, systemd-libs-219-62.el7_6.2 +2
Red Hat Enterprise Linux Client Optional (v. 7) libgudev1-devel-219-62.el7_6.2, systemd-devel-219-62.el7_6.2, systemd-journal-gateway-219-62.el7_6.2 +2
Red Hat Enterprise Linux ComputeNode (v. 7) libgudev1-219-62.el7_6.2, systemd-219-62.el7_6.2, systemd-libs-219-62.el7_6.2 +2
Red Hat Enterprise Linux ComputeNode Optional (v. 7) libgudev1-devel-219-62.el7_6.2, systemd-devel-219-62.el7_6.2, systemd-journal-gateway-219-62.el7_6.2 +2
Red Hat Enterprise Linux Server (v. 7) libgudev1-219-62.el7_6.2, libgudev1-219-62.el7_6.2.ppc, libgudev1-devel-219-62.el7_6.2 +8
Red Hat Enterprise Linux Server Optional (v. 7) systemd-journal-gateway-219-62.el7_6.2, systemd-networkd-219-62.el7_6.2, systemd-resolved-219-62.el7_6.2 +1
Red Hat Enterprise Linux Workstation (v. 7) libgudev1-219-62.el7_6.2, libgudev1-devel-219-62.el7_6.2, systemd-219-62.el7_6.2 +4
Red Hat Enterprise Linux Workstation Optional (v. 7) systemd-journal-gateway-219-62.el7_6.2, systemd-networkd-219-62.el7_6.2, systemd-resolved-219-62.el7_6.2
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) libgudev1-219-62.el7_6.2, libgudev1-devel-219-62.el7_6.2, systemd-219-62.el7_6.2 +4
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) systemd-journal-gateway-219-62.el7_6.2, systemd-networkd-219-62.el7_6.2, systemd-resolved-219-62.el7_6.2

Fixes 3 records

TI-2018-11178 CVE-2018-15688 · GHSA-8h24-cwhj-2xgm

Out-of-Bounds write in systemd-networkd dhcpv6 option handling

MEDIUM 43

A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01666 Published 2018-10-26 Fixed CWE-120

TI-2018-12075 CVE-2018-16865 · GHSA-cwf3-gffj-25fm

Resource allocation without limits in systemd

MEDIUM 40

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03016 Published 2019-01-11 Fixed CWE-770

TI-2018-12074 CVE-2018-16864 · GHSA-h53q-m6g5-wfq9

Resource allocation without limits in systemd

LOW 37

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00711 Published 2019-01-11 Fixed CWE-770