Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3816-1
HistoryNov 12, 2018 - 12:00 a.m.

systemd vulnerabilities

2018-11-1200:00:00
ubuntu.com
410

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.003

Percentile

65.7%

JSON

Releases

  • Ubuntu 18.10
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • systemd - system and service manager

Details

Jann Horn discovered that unit_deserialize incorrectly handled status messages
above a certain length. A local attacker could potentially exploit this via
NotifyAccess to inject arbitrary state across re-execution and obtain root
privileges. (CVE-2018-15686)

Jann Horn discovered a race condition in chown_one(). A local attacker
could potentially exploit this by setting arbitrary permissions on certain
files to obtain root privileges. This issue only affected Ubuntu 18.04 LTS
and Ubuntu 18.10. (CVE-2018-15687)

It was discovered that systemd-tmpfiles mishandled symlinks in
non-terminal path components. A local attacker could potentially exploit
this by gaining ownership of certain files to obtain root privileges. This
issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-6954)

Related

nessus 47
cloudfoundry 3
openvas 32
ubuntu 2
gentoo 1
fedora 8
archlinux 2
ibm 2
prion 3
zdt 4
nvd 3
exploitdb 2
osv 5
ubuntucve 3
cve 3
packetstorm 2
debiancve 3
cbl_mariner 2
cvelist 3
redhatcve 3
veracode 1
f5 1
photon 8
altlinux 1
suse 4
redhat 4
debian 1
centos 1
oraclelinux 1
amazon 2
rosalinux 1
oracle 1
nessus
nessus
Ubuntu 16.04 LTS : systemd regression (USN-3816-3)
2018-11-28 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS : systemd vulnerabilities (USN-3816-1)
2018-11-13 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS : systemd vulnerability (USN-3816-2)
2018-11-20 00:00:00
cloudfoundry
cloudfoundry
USN-3816-2: systemd vulnerability | Cloud Foundry
2018-12-06 00:00:00
USN-3816-3: systemd regression | Cloud Foundry
2018-12-06 00:00:00
USN-3816-1: systemd vulnerabilities | Cloud Foundry
2018-11-20 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3816-3)
2018-11-28 00:00:00
Ubuntu: Security Advisory (USN-3816-2)
2018-11-20 00:00:00
Ubuntu: Security Advisory (USN-3816-1)
2018-11-13 00:00:00
ubuntu
ubuntu
systemd regression
2018-11-27 00:00:00
systemd vulnerability
2018-11-19 00:00:00
gentoo
gentoo
systemd: Multiple vulnerabilities
2018-10-30 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: systemd-238-10.git438ac26.fc28
2018-11-04 22:10:03
[SECURITY] Fedora 29 Update: systemd-239-6.git9f3aed1.fc29
2018-11-01 15:07:57
[SECURITY] Fedora 29 Update: systemd-239-8.gite339eae.fc29
2019-01-13 02:32:41
archlinux
archlinux
[ASA-201811-11] systemd: multiple issues
2018-11-07 00:00:00
[ASA-201901-4] systemd: multiple issues
2019-01-08 00:00:00
ibm
ibm
Security Bulletin: IBM MQ Cloud Paks are vulnerable to multiple vulnerabilities in Systemd (CVE-2018-15688 CVE-2018-15687 CVE-2018-15686)
2018-12-18 13:50:01
Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018
2019-01-28 17:05:01
prion
prion
Race condition
2018-10-26 14:29:00
Privilege escalation
2018-10-26 14:29:00
Design/Logic Flaw
2018-02-13 20:29:00
zdt
zdt
Linux systemd Symlink Dereference Via chown_one() Exploit
2018-10-26 00:00:00
systemd - chown_one() can Dereference Symlinks Exploit
2018-10-29 00:00:00
systemd - reexec State Injection Exploit
2018-10-29 00:00:00
nvd
nvd
CVE-2018-15687
2018-10-26 14:29:00
CVE-2018-15686
2018-10-26 14:29:00
CVE-2018-6954
2018-02-13 20:29:00
exploitdb
exploitdb
systemd - 'chown_one()' Dereference Symlinks
2018-10-29 00:00:00
systemd - 'reexec' State Injection
2018-10-29 00:00:00
osv
osv
CVE-2018-15687
2018-10-26 14:29:00
CVE-2018-15686
2018-10-26 14:29:00
CVE-2018-6954
2018-02-13 20:29:00
ubuntucve
ubuntucve
CVE-2018-15687
2018-10-26 00:00:00
CVE-2018-15686
2018-10-26 00:00:00
CVE-2018-6954
2018-02-13 00:00:00
cve
cve
CVE-2018-15687
2018-10-26 14:29:00
CVE-2018-15686
2018-10-26 14:29:00
CVE-2018-6954
2018-02-13 20:29:00
packetstorm
packetstorm
Linux systemd Symlink Dereference Via chown_one()
2018-10-26 00:00:00
Linux systemd Line Splitting
2018-10-26 00:00:00
debiancve
debiancve
CVE-2018-15687
2018-10-26 14:29:00
CVE-2018-15686
2018-10-26 14:29:00
CVE-2018-6954
2018-02-13 20:29:00
cbl_mariner
cbl_mariner
CVE-2018-15687 affecting package systemd 239-44
2020-09-09 06:09:21
CVE-2018-15686 affecting package systemd 239-44
2020-09-09 06:09:21
cvelist
cvelist
CVE-2018-15687 systemd: chown_one() can dereference symlinks
2018-10-26 14:00:00
CVE-2018-15686 systemd: reexec state injection: fgets() on overlong lines leads to line splitting
2018-10-26 14:00:00
CVE-2018-6954
2018-02-13 20:00:00
redhatcve
redhatcve
CVE-2018-15687
2022-01-13 06:42:13
CVE-2018-15686
2022-01-13 06:42:08
CVE-2018-6954
2018-02-14 04:49:04
veracode
veracode
Privilege Escalation
2018-10-29 07:34:47
f5
f5
K40356136 : systemd vulnerability CVE-2018-15686
2020-11-30 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0166
2019-06-21 00:00:00
Critical Photon OS Security Update - PHSA-2019-0121
2019-01-14 00:00:00
Important Photon OS Security Update - PHSA-2019-0166
2019-06-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package systemd version 1:239-alt3
2018-10-29 00:00:00
suse
suse
Security update for systemd (important)
2018-11-10 00:11:51
Security update for systemd (important)
2018-11-17 00:16:31
Security update for systemd (important)
2019-05-28 00:00:00
redhat
redhat
(RHSA-2020:0593) Moderate: systemd security update
2020-02-25 11:32:36
(RHSA-2019:3222) Moderate: systemd security and bug fix update
2019-10-29 12:00:51
(RHSA-2020:1264) Moderate: systemd security and bug fix update
2020-04-01 07:32:50
debian
debian
[SECURITY] [DLA 1580-1] systemd security update
2018-11-19 23:42:42
centos
centos
libgudev1, systemd security update
2019-08-30 04:25:11
oraclelinux
oraclelinux
systemd security, bug fix, and enhancement update
2019-08-13 00:00:00
amazon
amazon
Medium: systemd
2021-06-16 20:36:00
Important: systemd
2021-05-20 17:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1982
2021-07-02 18:13:58
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.003

Percentile

65.7%

JSON
Related for USN-3816-1
nessus47cloudfoundry3openvas32ubuntu2gentoo1fedora8archlinux2ibm2prion3zdt4nvd3exploitdb2osv5ubuntucve3cve3packetstorm2debiancve3cbl_mariner2cvelist3redhatcve3veracode1f51photon8altlinux1suse4redhat4debian1centos1oraclelinux1amazon2rosalinux1oracle1