{"id":"CVE-2018-15686","aliases":["DEBIAN-CVE-2018-15686","DLA-1580-1","EUVD-2018-7556","GHSA-86rx-vp92-xvgg","RHSA-2019:2091","RHSA-2019:3222","RHSA-2020:0593","RHSA-2020:1264","SUSE-SU-2018:3644-1","SUSE-SU-2018:3767-1","SUSE-SU-2018:3767-2","SUSE-SU-2019:0053-1","SUSE-SU-2019:0054-1","SUSE-SU-2019:0054-2","UBUNTU-CVE-2018-15686","USN-3816-1","openSUSE-SU-2024:11420-1"],"status":"published","title":"systemd: reexec state injection: fgets() on overlong lines leads to line splitting","description":"A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.","severity":{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.02261,"percentile":0.83098,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-502"],"published":"2018-10-26T00:00:00Z","modified":"2026-10-24T10:49:33Z","exploits":[{"source":"exploitdb","id":"EDB-45714","title":"systemd - 'reexec' State Injection","type":"dos","platform":"linux","date":"2018-10-29","verified":true,"url":"https://www.exploit-db.com/exploits/45714"},{"source":"pocgithub","id":"hpcprofessional/remediate_cesa_2019_2091","title":"hpcprofessional/remediate_cesa_2019_2091","date":"2019-10-03","url":"https://github.com/hpcprofessional/remediate_cesa_2019_2091"}],"fixes":[{"ecosystem":"Debian:12","package":"systemd","fixed_in":["239-12"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"systemd","fixed_in":["239-12"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"systemd","fixed_in":["239-12"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"systemd","fixed_in":["229-4ubuntu21.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"systemd","fixed_in":["237-3ubuntu10.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-12"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-12"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"239-12"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"215-17+deb8u8"}]}],"versions":["215-17","215-17+deb8u1","215-17+deb8u2","215-17+deb8u3","215-17+deb8u4","215-17+deb8u5","215-17+deb8u6","215-17+deb8u7"],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-67.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-62.el7_6.11"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-42.el7_4.20"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"libgudev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"libgudev1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"systemd-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"systemd-sysv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"systemd-journal-gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"systemd-networkd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"systemd-resolved","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:219-57.el7_5.9"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"234-24.15.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"228-150.53.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"210-70.74.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"210-116.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"210-116.19.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.8"}]}],"versions":["225-1ubuntu9","227-2ubuntu1","227-2ubuntu2","228-1ubuntu2","228-2ubuntu1","228-2ubuntu2","228-3ubuntu1","228-4ubuntu1","228-4ubuntu2","228-5ubuntu1","228-5ubuntu2","228-5ubuntu3","228-6ubuntu1","229-1ubuntu2","229-1ubuntu4","229-2ubuntu1","229-3ubuntu1","229-3ubuntu2","229-4ubuntu1","229-4ubuntu4","229-4ubuntu5","229-4ubuntu6","229-4ubuntu7","229-4ubuntu8","229-4ubuntu10","229-4ubuntu11","229-4ubuntu12","229-4ubuntu13","229-4ubuntu16","229-4ubuntu17","229-4ubuntu19","229-4ubuntu20","229-4ubuntu21","229-4ubuntu21.1","229-4ubuntu21.2","229-4ubuntu21.3","229-4ubuntu21.4","229-4ubuntu21.5","229-4ubuntu21.6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.6"}]}],"versions":["234-2ubuntu12","235-2ubuntu3","235-3ubuntu2","235-3ubuntu3","237-3ubuntu3","237-3ubuntu4","237-3ubuntu6","237-3ubuntu7","237-3ubuntu8","237-3ubuntu10","237-3ubuntu10.2","237-3ubuntu10.3","237-3ubuntu10.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"229-4ubuntu21.8"}]}],"versions":["225-1ubuntu9","227-2ubuntu1","227-2ubuntu2","228-1ubuntu2","228-2ubuntu1","228-2ubuntu2","228-3ubuntu1","228-4ubuntu1","228-4ubuntu2","228-5ubuntu1","228-5ubuntu2","228-5ubuntu3","228-6ubuntu1","229-1ubuntu2","229-1ubuntu4","229-2ubuntu1","229-3ubuntu1","229-3ubuntu2","229-4ubuntu1","229-4ubuntu4","229-4ubuntu5","229-4ubuntu6","229-4ubuntu7","229-4ubuntu8","229-4ubuntu10","229-4ubuntu11","229-4ubuntu12","229-4ubuntu13","229-4ubuntu16","229-4ubuntu17","229-4ubuntu19","229-4ubuntu20","229-4ubuntu21","229-4ubuntu21.1","229-4ubuntu21.2","229-4ubuntu21.3","229-4ubuntu21.4","229-4ubuntu21.5","229-4ubuntu21.6"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.6"}]}],"versions":["234-2ubuntu12","235-2ubuntu3","235-3ubuntu2","235-3ubuntu3","237-3ubuntu3","237-3ubuntu4","237-3ubuntu6","237-3ubuntu7","237-3ubuntu8","237-3ubuntu10","237-3ubuntu10.2","237-3ubuntu10.3","237-3ubuntu10.4"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"249.4-2.2"}]}],"bundled":19}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"oracle","product":"communications_cloud_native_core_network_function_cloud_native_environment"},{"vendor":"systemd","product":"systemd"},{"vendor":"systemd_project","product":"systemd"}],"references":[{"url":"https://security.gentoo.org/glsa/201810-10","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00017.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/105747","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.exploit-db.com/exploits/45714/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://usn.ubuntu.com/3816-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2091","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3222","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0593","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/systemd/systemd/pull/10519","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15686","tags":["advisory"]},{"url":"https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E"},{"url":"https://usn.ubuntu.com/3816-1"},{"url":"https://www.exploit-db.com/exploits/45714"},{"url":"https://github.com/advisories/GHSA-86rx-vp92-xvgg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-15686","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1267552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1272485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1463678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1639071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1641764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651257","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1653867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1660422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1662867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1663365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1666612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691511","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1697909","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2091.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-15686","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-15686","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16866","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16866","tags":["advisory"]},{"url":"https://www.qualys.com/2019/01/09/system-down/system-down.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16888","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729227","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3222.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0593.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1264","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798160","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1264.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183644-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1089761","tags":["report"]},{"url":"https://bugzilla.suse.com/1090944","tags":["report"]},{"url":"https://bugzilla.suse.com/1091677","tags":["report"]},{"url":"https://bugzilla.suse.com/1093753","tags":["report"]},{"url":"https://bugzilla.suse.com/1101040","tags":["report"]},{"url":"https://bugzilla.suse.com/1102908","tags":["report"]},{"url":"https://bugzilla.suse.com/1105031","tags":["report"]},{"url":"https://bugzilla.suse.com/1107640","tags":["report"]},{"url":"https://bugzilla.suse.com/1107941","tags":["report"]},{"url":"https://bugzilla.suse.com/1109197","tags":["report"]},{"url":"https://bugzilla.suse.com/1109252","tags":["report"]},{"url":"https://bugzilla.suse.com/1110445","tags":["report"]},{"url":"https://bugzilla.suse.com/1112024","tags":["report"]},{"url":"https://bugzilla.suse.com/1113083","tags":["report"]},{"url":"https://bugzilla.suse.com/1113632","tags":["report"]},{"url":"https://bugzilla.suse.com/1113665","tags":["report"]},{"url":"https://bugzilla.suse.com/1114135","tags":["report"]},{"url":"https://bugzilla.suse.com/991901","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15688","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183767-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1106923","tags":["report"]},{"url":"https://bugzilla.suse.com/1108835","tags":["report"]},{"url":"https://bugzilla.suse.com/1111278","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183767-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190053-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1068588","tags":["report"]},{"url":"https://bugzilla.suse.com/1071558","tags":["report"]},{"url":"https://bugzilla.suse.com/1120323","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16865","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190054-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190054-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-15686","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3816-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-6954","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-15687","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18078","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-21029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33910","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-15686","title":"systemd: reexec state injection: fgets() on overlong lines leads to line splitting","description":"A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.","status":"published","published":"2018-10-26T14:00:00Z","modified":"2025-06-09T15:50:48.76Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:35:03.288698Z"}],"euvd":[{"id":"EUVD-2018-7556","description":"A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.","status":"published","published":"2018-10-26T14:00:00Z","modified":"2025-06-09T15:50:48Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:27.753525Z"}],"ghsa":[{"id":"GHSA-86rx-vp92-xvgg","title":"A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state...","description":"A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.","status":"published","published":"2022-05-13T01:04:11Z","modified":"2025-06-09T18:31:58Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T15:02:37.765114Z"}],"nvd":[{"id":"CVE-2018-15686","description":"A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.","status":"published","published":"2018-10-26T14:29:00.613Z","modified":"2026-06-17T01:42:56.003Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:04:46.409324Z"}],"osv":[{"id":"CVE-2018-15686","description":"A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.","status":"published","published":"2018-10-26T14:29:00.613Z","modified":"2026-10-24T10:49:33.009773621Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"DEBIAN-CVE-2018-15686","description":"A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.","status":"published","published":"2018-10-26T14:29:00.613Z","modified":"2026-10-23T18:04:46.727437401Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"RHSA-2019:2091","title":"Red Hat Security Advisory: systemd security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:02:18Z","modified":"2026-06-27T10:07:48Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3222","title":"Red Hat Security Advisory: systemd security and bug fix update","status":"published","published":"2024-09-16T02:02:26Z","modified":"2026-06-27T10:08:18Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2020:0593","title":"Red Hat Security Advisory: systemd security update","status":"published","published":"2024-09-16T02:02:32Z","modified":"2026-06-27T10:09:10Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:1264","title":"Red Hat Security Advisory: systemd security and bug fix update","status":"published","published":"2024-09-16T02:02:40Z","modified":"2026-06-27T10:09:33Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2018-15686","description":"A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.","status":"published","published":"2018-10-26T00:00:00Z","modified":"2026-04-22T11:20:35.75538Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"DLA-1580-1","title":"systemd - security update","status":"published","published":"2018-11-19T00:00:00Z","modified":"2026-03-09T01:19:01.355441Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"openSUSE-SU-2024:11420-1","title":"libsystemd0-249.4-2.2 on GA media","description":"These are all security issues fixed in the libsystemd0-249.4-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:45:22.858405Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2018:3644-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. (bsc#1113632)\n- CVE-2018-15686: A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. (bsc#1113665)\n\nNon security issues fixed:\n\n- dhcp6: split assert_return() to be more debuggable when hit\n- core: skip unit deserialization and move to the next one when unit_deserialize() fails\n- core: properly handle deserialization of unknown unit types (#6476)\n- core: don't create Requires for workdir if 'missing ok' (bsc#1113083)\n- logind: use manager_get_user_by_pid() where appropriate\n- logind: rework manager_get_{user|session}_by_pid() a bit\n- login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)\n- core: be more defensive if we can't determine per-connection socket peer (#7329)\n- core: introduce systemd.early_core_pattern= kernel cmdline option\n- core: add missing 'continue' statement\n- core/mount: fstype may be NULL\n- journald: don't ship systemd-journald-audit.socket (bsc#1109252)\n- core: make 'tmpfs' dependencies on swapfs a 'default' dep, not an 'implicit' (bsc#1110445)\n- mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)\n- detect-virt: do not try to read all of /proc/cpuinfo (bsc#1109197)\n- emergency: make sure console password agents don't interfere with the emergency shell\n- man: document that 'nofail' also has an effect on ordering\n- journald: take leading spaces into account in syslog_parse_identifier\n- journal: do not remove multiple spaces after identifier in syslog message\n- syslog: fix segfault in syslog_parse_priority()\n- journal: fix syslog_parse_identifier()\n- install: drop left-over debug message (#6913)\n- Ship systemd-sysv-install helper via the main package\n  This script was part of systemd-sysvinit sub-package but it was\n  wrong since systemd-sysv-install is a script used to redirect\n  enable/disable operations to chkconfig when the unit targets are\n  sysv init scripts. Therefore it's never been a SySV init tool.\n- Add udev.no-partlabel-links kernel command-line option. This option can be used to disable\n  the generation of the by-partlabel symlinks regardless of the name used. (bsc#1089761)\n- man: SystemMaxUse= clarification in journald.conf(5). (bsc#1101040)\n- systemctl: load unit if needed in 'systemctl is-active' (bsc#1102908)\n- core: don't freeze OnCalendar= timer units when the clock goes back a lot (bsc#1090944)\n- Enable or disable machines.target according to the presets (bsc#1107941)\n- cryptsetup: add support for sector-size= option (fate#325697)\n- nspawn: always use permission mode 555 for /sys (bsc#1107640)\n- Bugfix for a race condition between daemon-reload and other commands (bsc#1105031)\n- Fixes an issue where login with root credentials was not possible in init level 5 (bsc#1091677)\n- Fix an issue where services of type 'notify' harmless DENIED log entries. (bsc#991901)\n- Does no longer adjust qgroups on existing subvolumes (bsc#1093753)\n- cryptsetup: add support for sector-size= option (#9936) (fate#325697 bsc#1114135)\n","status":"published","published":"2018-11-07T10:14:46Z","modified":"2026-02-04T02:39:32.064153Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3767-1","title":"Security update for systemd","description":"\nThis update for systemd fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. (bsc#1113632)\n- CVE-2018-15686: A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. (bsc#1113665)\n\nNon-security issues fixed:\n\n- dhcp6: split assert_return() to be more debuggable when hit\n- core: skip unit deserialization and move to the next one when unit_deserialize() fails\n- core: properly handle deserialization of unknown unit types (#6476)\n- core: don't create Requires for workdir if 'missing ok' (bsc#1113083)\n- logind: use manager_get_user_by_pid() where appropriate\n- logind: rework manager_get_{user|session}_by_pid() a bit\n- login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)\n- core: be more defensive if we can't determine per-connection socket peer (#7329)\n- socket-util: introduce port argument in sockaddr_port()\n- service: fixup ExecStop for socket-activated shutdown (#4120)\n- service: Continue shutdown on socket activated unit on termination (#4108) (bsc#1106923)\n- cryptsetup: build fixes for 'add support for sector-size= option'\n- udev-rules: IMPORT cmdline does not recognize keys with similar names (bsc#1111278)\n- core: keep the kernel coredump defaults when systemd-coredump is disabled\n- core: shorten main() a bit, split out coredump initialization\n- core: set RLIMIT_CORE to unlimited by default (bsc#1108835)\n- core/mount: fstype may be NULL\n- journald: don't ship systemd-journald-audit.socket (bsc#1109252)\n- core: make 'tmpfs' dependencies on swapfs a 'default' dep, not an 'implicit' (bsc#1110445)\n- mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)\n- tmp.mount.hm4: After swap.target (#3087)\n\n- Ship systemd-sysv-install helper via the main package\n  This script was part of systemd-sysvinit sub-package but it was\n  wrong since systemd-sysv-install is a script used to redirect\n  enable/disable operations to chkconfig when the unit targets are\n  sysv init scripts. Therefore it's never been a SySV init tool.\n","status":"published","published":"2018-11-14T13:15:06Z","modified":"2026-02-04T03:21:41.62652Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3767-2","title":"Security update for systemd","description":"\nThis update for systemd fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. (bsc#1113632)\n- CVE-2018-15686: A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. (bsc#1113665)\n\nNon-security issues fixed:\n\n- dhcp6: split assert_return() to be more debuggable when hit\n- core: skip unit deserialization and move to the next one when unit_deserialize() fails\n- core: properly handle deserialization of unknown unit types (#6476)\n- core: don't create Requires for workdir if 'missing ok' (bsc#1113083)\n- logind: use manager_get_user_by_pid() where appropriate\n- logind: rework manager_get_{user|session}_by_pid() a bit\n- login: fix user@.service case, so we don't allow nested sessions (#8051) (bsc#1112024)\n- core: be more defensive if we can't determine per-connection socket peer (#7329)\n- socket-util: introduce port argument in sockaddr_port()\n- service: fixup ExecStop for socket-activated shutdown (#4120)\n- service: Continue shutdown on socket activated unit on termination (#4108) (bsc#1106923)\n- cryptsetup: build fixes for 'add support for sector-size= option'\n- udev-rules: IMPORT cmdline does not recognize keys with similar names (bsc#1111278)\n- core: keep the kernel coredump defaults when systemd-coredump is disabled\n- core: shorten main() a bit, split out coredump initialization\n- core: set RLIMIT_CORE to unlimited by default (bsc#1108835)\n- core/mount: fstype may be NULL\n- journald: don't ship systemd-journald-audit.socket (bsc#1109252)\n- core: make 'tmpfs' dependencies on swapfs a 'default' dep, not an 'implicit' (bsc#1110445)\n- mount: make sure we unmount tmpfs mounts before we deactivate swaps (#7076)\n- tmp.mount.hm4: After swap.target (#3087)\n\n- Ship systemd-sysv-install helper via the main package\n  This script was part of systemd-sysvinit sub-package but it was\n  wrong since systemd-sysv-install is a script used to redirect\n  enable/disable operations to chkconfig when the unit targets are\n  sysv init scripts. Therefore it's never been a SySV init tool.\n","status":"published","published":"2018-12-10T07:10:37Z","modified":"2026-02-04T02:57:38.117414Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2019:0053-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n* Fix security vulnerabilities CVE-2018-16864 and CVE-2018-16865 (bsc#1120323):\n  Both issues were memory corruptions via attacker-controlled alloca which could\n  have been used to gain root privileges by a local attacker.\n\n* Fix security vulnerability CVE-2018-15686 (bsc#1113665): A vulnerability in\n  unit_deserialize of systemd used to allow an attacker to supply arbitrary\n  state across systemd re-execution via NotifyAccess. This could have been used\n  to improperly influence systemd execution and possibly lead to root privilege\n  escalation.\n\n* Remedy 2048 character line-length limit in systemd-sysctl code that would\n  cause parser failures if /etc/sysctl.conf contained lines that exceeded this\n  length (bsc#1071558).\n\n* Fix a bug in systemd's core timer code that would cause timer looping under\n  certain conditions, resulting in hundreds of syslog messages being written to\n  the journal (bsc#1068588).\n","status":"published","published":"2019-01-09T21:07:59Z","modified":"2026-02-04T03:10:40.628819Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0054-1","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n* Fix security vulnerabilities CVE-2018-16864 and CVE-2018-16865 (bsc#1120323):\n  Both issues were memory corruptions via attacker-controlled alloca which could\n  have been used to gain root privileges by a local attacker.\n\n* Fix security vulnerability CVE-2018-15686 (bsc#1113665): A vulnerability in\n  unit_deserialize of systemd used to allow an attacker to supply arbitrary\n  state across systemd re-execution via NotifyAccess. This could have been used\n  to improperly influence systemd execution and possibly lead to root privilege\n  escalation.\n\n* Remedy 2048 character line-length limit in systemd-sysctl code that would\n  cause parser failures if /etc/sysctl.conf contained lines that exceeded this\n  length (bsc#1071558).\n\n* Fix a bug in systemd's core timer code that would cause timer looping under\n  certain conditions, resulting in hundreds of syslog messages being written to\n  the journal (bsc#1068588).\n","status":"published","published":"2019-01-09T21:08:17Z","modified":"2026-02-04T03:12:22.786872Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0054-2","title":"Security update for systemd","description":"This update for systemd fixes the following issues:\n\n* Fix security vulnerabilities CVE-2018-16864 and CVE-2018-16865 (bsc#1120323):\n  Both issues were memory corruptions via attacker-controlled alloca which could\n  have been used to gain root privileges by a local attacker.\n\n* Fix security vulnerability CVE-2018-15686 (bsc#1113665): A vulnerability in\n  unit_deserialize of systemd used to allow an attacker to supply arbitrary\n  state across systemd re-execution via NotifyAccess. This could have been used\n  to improperly influence systemd execution and possibly lead to root privilege\n  escalation.\n\n* Remedy 2048 character line-length limit in systemd-sysctl code that would\n  cause parser failures if /etc/sysctl.conf contained lines that exceeded this\n  length (bsc#1071558).\n\n* Fix a bug in systemd's core timer code that would cause timer looping under\n  certain conditions, resulting in hundreds of syslog messages being written to\n  the journal (bsc#1068588).\n","status":"published","published":"2019-04-12T06:23:29Z","modified":"2026-02-04T04:08:55.791588Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-3816-1","title":"systemd vulnerabilities","description":"Jann Horn discovered that unit_deserialize incorrectly handled status messages\nabove a certain length. A local attacker could potentially exploit this via\nNotifyAccess to inject arbitrary state across re-execution and obtain root\nprivileges. (CVE-2018-15686)\n\nJann Horn discovered a race condition in chown_one(). A local attacker\ncould potentially exploit this by setting arbitrary permissions on certain\nfiles to obtain root privileges. This issue only affected Ubuntu 18.04 LTS\nand Ubuntu 18.10. (CVE-2018-15687)\n\nIt was discovered that systemd-tmpfiles mishandled symlinks in\nnon-terminal path components. A local attacker could potentially exploit\nthis by gaining ownership of certain files to obtain root privileges. This\nissue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-6954)\n","status":"published","published":"2018-11-12T17:32:15Z","modified":"2026-04-22T09:52:02.389308Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}