USN-3816-1

Dashboard / Vulnerabilities / USN-3816-1

USN-3816-1

Summary: systemd vulnerabilities

Details: Jann Horn discovered that unit_deserialize incorrectly handled status messages above a certain length. A local attacker could potentially exploit this via NotifyAccess to inject arbitrary state across re-execution and obtain root privileges. (CVE-2018-15686) Jann Horn discovered a race condition in chown_one(). A local attacker could potentially exploit this by setting arbitrary permissions on certain files to obtain root privileges. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-15687) It was discovered that systemd-tmpfiles mishandled symlinks in non-terminal path components. A local attacker could potentially exploit this by gaining ownership of certain files to obtain root privileges. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-6954)

References: https://ubuntu.com/security/notices/USN-3816-1, https://ubuntu.com/security/CVE-2018-6954, https://ubuntu.com/security/CVE-2018-15686, https://ubuntu.com/security/CVE-2018-15687