CVE-2018-6954: High severity Systemd Project Systemd vulnerability

Published Feb 13, 2018
·
Updated

Last updated 24 July 2024

Other sources

systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protectedsymlinks sysctl is turned on.

Affected Software

6 affected componentsFixes available
Systemd Project Systemd<=237
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=18.10
openSUSE Leap=42.3
debian/systemd
247.3-7+deb11u5247.3-7+deb11u6252.36-1~deb12u1252.38-1~deb12u1257.6-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/systemd to a version that resolves this vulnerability.

    Fixed in 247.3-7+deb11u5Fixed in 247.3-7+deb11u6Fixed in 252.36-1~deb12u1Fixed in 252.38-1~deb12u1Fixed in 257.6-1
  2. Upgrade

    Upgrade systemd-tmpfiles to a version that resolves this vulnerability.

    Fixed in through 237

Event History

Feb 13, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:09 PM
Description
Sep 14, 2024
Data Sourced
via Ubuntu·06:33 AM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2018-6954?

The severity of CVE-2018-6954 is high with a CVSS score of 7.8.

2

How does CVE-2018-6954 affect systemd?

CVE-2018-6954 affects systemd versions up to and including 237.

3

What is the impact of CVE-2018-6954?

CVE-2018-6954 allows local users to obtain ownership of arbitrary files by exploiting symlinks in non-terminal path components.

4

How can I fix CVE-2018-6954 on Ubuntu 18.04?

To fix CVE-2018-6954 on Ubuntu 18.04, update the systemd package to version 237-3ubuntu10.9 or later.

5

Where can I find more information about CVE-2018-6954?

More information about CVE-2018-6954 can be found on the MITRE CVE website and the Ubuntu security notices (USN-3816-1 and USN-3816-2).

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203