CVE-2018-6954: High severity Systemd Project Systemd vulnerability
Last updated 24 July 2024
Other sources
systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of a directory and a file under that directory, and later replacing that directory with a symlink. This occurs even if the fs.protectedsymlinks sysctl is turned on.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/systemdto a version that resolves this vulnerability.Fixed in 247.3-7+deb11u5Fixed in 247.3-7+deb11u6Fixed in 252.36-1~deb12u1Fixed in 252.38-1~deb12u1Fixed in 257.6-1 - Upgrade
Upgrade
systemd-tmpfilesto a version that resolves this vulnerability.Fixed in through 237
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6954?
The severity of CVE-2018-6954 is high with a CVSS score of 7.8.
How does CVE-2018-6954 affect systemd?
CVE-2018-6954 affects systemd versions up to and including 237.
What is the impact of CVE-2018-6954?
CVE-2018-6954 allows local users to obtain ownership of arbitrary files by exploiting symlinks in non-terminal path components.
How can I fix CVE-2018-6954 on Ubuntu 18.04?
To fix CVE-2018-6954 on Ubuntu 18.04, update the systemd package to version 237-3ubuntu10.9 or later.
Where can I find more information about CVE-2018-6954?
More information about CVE-2018-6954 can be found on the MITRE CVE website and the Ubuntu security notices (USN-3816-1 and USN-3816-2).