REDHAT-BUG-1639071: Medium severity systemd vulnerability

Published Oct 15, 2018

Updated

systemd is vulnerable to line splitting via long lines read by fgets() in the unitdeserialize() function during daemon-reexec (e.g. during a package upgrade) allowing for state injection. Systemd services with NotifyAccess != none and malicious executables can exploit this vulnerability resulting corrupted process state.

Affected Software

1 affected component

systemd systemd

Event History

Oct 15, 2018

Data Sourced

via Red Hat·02:12 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1639071?

The severity of REDHAT-BUG-1639071 is considered high due to the potential for state injection and exploitation of systemd services.

How do I fix REDHAT-BUG-1639071?

To fix REDHAT-BUG-1639071, update the systemd package to the latest version that addresses this vulnerability.

Who is affected by REDHAT-BUG-1639071?

Users of systemd services that have `NotifyAccess != none` are particularly affected by REDHAT-BUG-1639071.

What type of attack does REDHAT-BUG-1639071 allow for?

REDHAT-BUG-1639071 allows for state injection attacks during the daemon-reexec process.

What versions of systemd are impacted by REDHAT-BUG-1639071?

All versions of systemd that include the vulnerable unit_deserialize() function are impacted by REDHAT-BUG-1639071.