CVE-2018-21029: Critical severity systemd vulnerability
DISPUTED systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent, and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname validation does not have anything to do with this issue (i.e. there is no hostname to be sent).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-21029?
CVE-2018-21029 is a vulnerability in systemd versions 239 through 245 that allows the acceptance of any certificate signed by a trusted certificate authority for DNS Over TLS without proper hostname validation.
Is CVE-2018-21029 a critical vulnerability?
Yes, CVE-2018-21029 has a severity keyword of 'critical' and a severity value of 9.8.
How does CVE-2018-21029 affect systemd?
CVE-2018-21029 affects systemd versions 239 through 245 and allows the acceptance of any certificate signed by a trusted certificate authority for DNS Over TLS without proper hostname validation.
What is the impact of CVE-2018-21029?
The impact of CVE-2018-21029 is that an attacker could use a malicious certificate to perform man-in-the-middle attacks on DNS traffic.
How can CVE-2018-21029 be mitigated?
To mitigate CVE-2018-21029, it is recommended to update systemd to a version that includes the fix for the vulnerability.