Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 455
Alerts This Week
Warning Icon 1 455

Ubuntu 18.04 USN-5583-1 Critical: Systemd User-After-Free Threat

ubuntu
Calendar Grey August 30, 2022
Dist Ubuntu Esm H88
A security bulletin for Ubuntu 18.04 details a flaw that could result in system instability or arbitrary code execution triggered by DNS queries.
systemd could be made to crash or run programs if it received specially crafted DNS request.

Summary

systemd could be made to crash or run programs if it received specially

crafted DNS request.

Software Description:

- systemd: system and service manager

Details:

It was discovered that systemd incorrectly handled certain DNS requests,

which leads to user-after-free vulnerability. An attacker could possibly use

this issue to cause a crash or execute arbitrary code. (CVE-2022-2526)

Topics%20covered

Topics Covered

security advisory critical arbitrary code execution Ubuntu DNS systemd user-after-free

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  systemd                         237-3ubuntu10.54

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5583-1

CVE-2022-2526

Severity
critical
Lowest
Low
Medium
High
Critical

August 29, 2022

Topics%20covered

Topics Covered

security advisory critical arbitrary code execution Ubuntu DNS systemd user-after-free

Package Information

https://launchpad.net/ubuntu/+source/systemd/237-3ubuntu10.54

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.