Alerts This Week
Warning Icon 1 537
Alerts This Week
Warning Icon 1 537

Ubuntu 18.04 LTS USN-3806-1 Critical: systemd DoS Threat

Ubuntu Large Esm H500
systemd-networkd could be made to crash or run programs if it received specially crafted network traffic.
=========================================================================Ubuntu Security Notice USN-3806-1
November 05, 2018

systemd vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.10
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

systemd-networkd could be made to crash or run programs if it received
specially crafted network traffic.

Software Description:
- systemd: system and service manager

Details:

Felix Wilhelm discovered that the systemd-networkd DHCPv6 client
incorrectly handled certain DHCPv6 messages. In configurations where
systemd-networkd is being used, an attacker on the same network could use
this issue to cause systemd-networkd to crash, resulting in a denial of
service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  systemd                         239-7ubuntu10.1

Ubuntu 18.04 LTS:
  systemd                         237-3ubuntu10.4

Ubuntu 16.04 LTS:
  systemd                         229-4ubuntu21.6

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-3806-1
  CVE-2018-15688

Package Information:
  https://launchpad.net/ubuntu/+source/systemd/239-7ubuntu10.1
  https://launchpad.net/ubuntu/+source/systemd/237-3ubuntu10.4
  https://launchpad.net/ubuntu/+source/systemd/229-4ubuntu21.6

Ubuntu 18.04 LTS USN-3806-1 Critical: systemd DoS Threat

ubuntu
Calendar Grey November 5, 2018
Dist Ubuntu Esm H88
A systemd flaw on Ubuntu exposes systems to crashes or unauthorized code execution through specially designed network inputs. Urgent patch advised.
systemd-networkd could be made to crash or run programs if it received specially crafted network traffic.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: systemd 239-7ubuntu10.1 Ubuntu 18.04 LTS: systemd 237-3ubuntu10.4 Ubuntu 16.04 LTS: systemd 229-4ubuntu21.6 After a standard system update you need to reboot your computer to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3806-1

CVE-2018-15688

Severity
critical
Lowest
Low
Medium
High
Critical

November 05, 2018

Package Information

https://launchpad.net/ubuntu/+source/systemd/239-7ubuntu10.1 https://launchpad.net/ubuntu/+source/systemd/237-3ubuntu10.4 https://launchpad.net/ubuntu/+source/systemd/229-4ubuntu21.6

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here