Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu: 4120-1 Critical: Systemd DNS Setting Manipulation

ubuntu
Calendar Grey September 3, 2019
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-4120-1 highlights a critical vulnerability in systemd that permits non-privileged users to modify DNS configurations.
systemd-resolved would allow unprivileged users to change DNS settings.

Summary

systemd-resolved would allow unprivileged users to change DNS settings.

Software Description:

- systemd: system and service manager

Details:

It was discovered that the systemd-resolved D-Bus interface did not

enforce appropriate access controls. A local unprivileged user could

exploit this to modify a system's DNS resolver settings.

Topics%20covered

Topics Covered

security advisory access control Ubuntu local exploit systemd service manager DNS settings

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  systemd                         240-6ubuntu5.6

Ubuntu 18.04 LTS:
  systemd                         237-3ubuntu10.28

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4120-1

CVE-2019-15718

Severity
critical
Lowest
Low
Medium
High
Critical

September 03, 2019

Topics%20covered

Topics Covered

security advisory access control Ubuntu local exploit systemd service manager DNS settings

Package Information

https://launchpad.net/ubuntu/+source/systemd/240-6ubuntu5.6
https://launchpad.net/ubuntu/+source/systemd/237-3ubuntu10.28

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.