Lucene search

K
gentooGentoo FoundationGLSA-201612-34
HistoryDec 13, 2016 - 12:00 a.m.

systemd: Multiple vulnerabilities

2016-12-1300:00:00
Gentoo Foundation
security.gentoo.org
26

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.055

Percentile

93.2%

Background

A system and service manager.

Description

Multiple vulnerabilities have been discovered in systemd. Please review the CVE identifiers referenced below for details.

Impact

An attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, or gain escalated privileges.

Workaround

There is no known workaround at this time.

Resolution

All systemd users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-apps/systemd-208"
OSVersionArchitecturePackageVersionFilename
Gentooanyallsys-apps/systemd< 208UNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.055

Percentile

93.2%