USN-4120-2
systemd regression
USN-4120-1 fixed a vulnerability in systemd. The update included a recent SRU from the updates pocket that introduced networking problems for some users. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that the systemd-resolved D-Bus interface did not enforce appropriate access controls. A local unprivileged user could exploit this to modify a system's DNS resolver settings.
What each source reports
OSV No score
systemd regression
USN-4120-1 fixed a vulnerability in systemd. The update included a recent SRU from the updates pocket that introduced networking problems for some users. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that the systemd-resolved D-Bus interface did not enforce appropriate access controls. A local unprivileged user could exploit this to modify a system's DNS resolver settings.
- Record
USN-4120-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
systemdUbuntu:18.04:LTS |
before 237-3ubuntu10.29, plus listed versions 234-2ubuntu12235-2ubuntu3235-3ubuntu2235-3ubuntu3237-3ubuntu3 Show 24 moreShow less237-3ubuntu4237-3ubuntu6237-3ubuntu7237-3ubuntu8237-3ubuntu10237-3ubuntu10.2237-3ubuntu10.3237-3ubuntu10.4237-3ubuntu10.6237-3ubuntu10.9237-3ubuntu10.11237-3ubuntu10.12237-3ubuntu10.13237-3ubuntu10.15237-3ubuntu10.17237-3ubuntu10.19237-3ubuntu10.20237-3ubuntu10.21237-3ubuntu10.22237-3ubuntu10.23237-3ubuntu10.24237-3ubuntu10.25237-3ubuntu10.26237-3ubuntu10.28 |
237-3ubuntu10.29 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4120-2 is a vulnerability with no CVSS score yet in systemd, published September 10, 2019. No source lists public exploit code. Fixed in systemd 237-3ubuntu10.29.