CVE-2020-13529: Medium severity systemd vulnerability

Published May 10, 2021

Updated

An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.

Affected Software

4 affected components

Systemd Project Systemd=245

Fedoraproject Fedora=33

NetApp Active Iq Unified Manager Vsphere

NetApp Cloud Backup

Event History

May 10, 2021

CVE Published

via MITRE·03:08 PM

Data Sourced

via MITRE·03:08 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2020-13529?

CVE-2020-13529 is a denial-of-service vulnerability in Systemd 245 that allows an attacker to cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack.

How does CVE-2020-13529 work?

CVE-2020-13529 works by sending a specially crafted DHCP FORCERENEW packet, which can be used to forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.

Which software versions are affected by CVE-2020-13529?

The affected software versions include Systemd 245, Fedoraproject Fedora 33, Netapp Active Iq Unified Manager, and Netapp Cloud Backup.

What is the severity of CVE-2020-13529?

CVE-2020-13529 has a severity rating of 6.1 (Medium).

Is there a fix available for CVE-2020-13529?

Yes, a fix for CVE-2020-13529 is available. It is recommended to update to the latest version of the affected software.