Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 18.10 USN-3855-1 Critical Update for Systemd DoS Vulnerabilities

ubuntu
Calendar Grey January 11, 2019
Scroller Ubuntu
Security advisory for Ubuntu systemd vulnerabilities with risks of code execution and denial of service.
Several security issues were fixed in systemd.

Summary

Several security issues were fixed in systemd.

Software Description:

- systemd: system and service manager

Details:

It was discovered that systemd-journald allocated variable-length buffers

for certain message fields on the stack. A local attacker could

potentially exploit this to cause a denial of service, or execute

arbitrary code. (CVE-2018-16864)

It was discovered that systemd-journald allocated variable-length arrays

of objects representing message fields on the stack. A local attacker

could potentially exploit this to cause a denial of service, or execute

arbitrary code. (CVE-2018-16865)

An out-of-bounds read was discovered in systemd-journald. A local

attacker could potentially exploit this to obtain sensitive information

and bypass ASLR protections. (CVE-2018-16866)

Topics%20covered

Topics Covered

security advisory denial of service security issue critical ubuntu systemd

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  systemd                         239-7ubuntu10.6

Ubuntu 18.04 LTS:
  systemd                         237-3ubuntu10.11

Ubuntu 16.04 LTS:
  systemd                         229-4ubuntu21.15

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-3855-1

  CVE-2018-16864, CVE-2018-16865, CVE-2018-16866

Severity
critical
Lowest
Low
Medium
High
Critical

January 11, 2019

Topics%20covered

Topics Covered

security advisory denial of service security issue critical ubuntu systemd

Package Information

  https://launchpad.net/ubuntu/+source/systemd/239-7ubuntu10.6
  https://launchpad.net/ubuntu/+source/systemd/237-3ubuntu10.11
  https://launchpad.net/ubuntu/+source/systemd/229-4ubuntu21.15

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.