Vulnerabilities

TI-2018-11178 CVE-2018-15688 · GHSA-8h24-cwhj-2xgm

Out-of-Bounds write in systemd-networkd dhcpv6 option handling

MEDIUM 44

A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01777 Published 2018-10-26 Fixed CWE-120

TI-2018-11177 CVE-2018-15687 · GHSA-wxcv-623q-99fj

LOW 35

A race condition in chown_one() of systemd allows an attacker to cause systemd to set arbitrary permissions on arbitrary files.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.01058 Published 2018-10-26 No fix listed CWE-362

TI-2018-11176 CVE-2018-15686 · GHSA-86rx-vp92-xvgg

MEDIUM 40

A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02261 Published 2018-10-26 Fixed CWE-502