REDHAT-BUG-1639067: High severity systemd networkd vulnerability

Published Oct 15, 2018

Updated

systemd-networkd is vulnerable to an out out-of-bounds heap write in the DHCPv6 client when handling options sent by network adjacent DHCP servers. A attacker could exploit this via malicious DHCP server to corrupt heap memory on client machines, resulting in a denial of service or potential code execution.

Affected Software

1 affected component

systemd networkd

Event History

Oct 15, 2018

Data Sourced

via Red Hat·01:41 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1639067?

The severity of REDHAT-BUG-1639067 is critical due to the potential for remote code execution or denial of service.

How do I fix REDHAT-BUG-1639067?

To fix REDHAT-BUG-1639067, update systemd-networkd to the latest patched version provided by your distribution.

Who is affected by REDHAT-BUG-1639067?

REDHAT-BUG-1639067 affects users of systemd-networkd that utilize DHCPv6 for network configuration.

What can an attacker do with REDHAT-BUG-1639067?

An attacker can exploit REDHAT-BUG-1639067 to corrupt heap memory, potentially leading to a denial of service or execution of arbitrary code.

When was REDHAT-BUG-1639067 discovered?

REDHAT-BUG-1639067 was reported and documented in August 2019.