{"id":"CVE-2019-15718","aliases":["DEBIAN-CVE-2019-15718","EUVD-2019-6654","GHSA-p39j-chr3-gjhq","MGASA-2019-0330","RHSA-2019:3592","UBUNTU-CVE-2019-15718","USN-4120-1"],"status":"published","title":"In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by...","description":"In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00511,"percentile":0.43853,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2019-09-03T00:00:00Z","modified":"2026-10-24T10:30:42Z","fixes":[{"ecosystem":"Debian:12","package":"systemd","fixed_in":["242-7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"systemd","fixed_in":["242-7"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"systemd","fixed_in":["242-7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"systemd","fixed_in":["241-8.4.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container-debuginfo","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debuginfo","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debugsource","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-devel","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote-debuginfo","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs-debuginfo","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam-debuginfo","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests-debuginfo","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev-debuginfo","fixed_in":["0:239-18.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"systemd","fixed_in":["237-3ubuntu10.28"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"242-7"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"242-7"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"242-7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"241-8.4.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-container-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-journal-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-pam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"systemd-udev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:239-18.el8"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.28"}]}],"versions":["234-2ubuntu12","235-2ubuntu3","235-3ubuntu2","235-3ubuntu3","237-3ubuntu3","237-3ubuntu4","237-3ubuntu6","237-3ubuntu7","237-3ubuntu8","237-3ubuntu10","237-3ubuntu10.2","237-3ubuntu10.3","237-3ubuntu10.4","237-3ubuntu10.6","237-3ubuntu10.9","237-3ubuntu10.11","237-3ubuntu10.12","237-3ubuntu10.13","237-3ubuntu10.15","237-3ubuntu10.17","237-3ubuntu10.19","237-3ubuntu10.20","237-3ubuntu10.21","237-3ubuntu10.22","237-3ubuntu10.23","237-3ubuntu10.24","237-3ubuntu10.25","237-3ubuntu10.26"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.28"}]}],"versions":["234-2ubuntu12","235-2ubuntu3","235-3ubuntu2","235-3ubuntu3","237-3ubuntu3","237-3ubuntu4","237-3ubuntu6","237-3ubuntu7","237-3ubuntu8","237-3ubuntu10","237-3ubuntu10.2","237-3ubuntu10.3","237-3ubuntu10.4","237-3ubuntu10.6","237-3ubuntu10.9","237-3ubuntu10.11","237-3ubuntu10.12","237-3ubuntu10.13","237-3ubuntu10.15","237-3ubuntu10.17","237-3ubuntu10.19","237-3ubuntu10.20","237-3ubuntu10.21","237-3ubuntu10.22","237-3ubuntu10.23","237-3ubuntu10.24","237-3ubuntu10.25","237-3ubuntu10.26"]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_8_s390x"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus_s390x"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian_eus"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_server_update_services_for_sap_solutions"},{"vendor":"redhat","product":"openshift_container_platform"},{"vendor":"systemd_project","product":"systemd"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1746057","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"http://www.openwall.com/lists/oss-security/2019/09/03/1","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2WNHRJW4XI6H5YMDG4BUFGPAXWUMUVG/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIKGKXZ5OEGOEYURHLJHEMFYNLEGAW5B/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRE5IS24XTF5WNZGH2L7GSQJKARBOEGL/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3592","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Issue Tracking","Third Party Advisory","report","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3941","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15718","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BRE5IS24XTF5WNZGH2L7GSQJKARBOEGL/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HIKGKXZ5OEGOEYURHLJHEMFYNLEGAW5B/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U2WNHRJW4XI6H5YMDG4BUFGPAXWUMUVG/"},{"url":"https://github.com/advisories/GHSA-p39j-chr3-gjhq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-15718","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0330.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25404","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2019/09/03/1","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1658691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667065","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1670728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1683334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1689832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1694999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1697893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1707175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1712524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719153","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1733395","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3592.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-15718","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-15718","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2019-15718","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4120-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-15718","description":"In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.","status":"published","published":"2019-09-04T11:04:31Z","modified":"2024-08-05T00:56:22.337Z","updated_at":"2026-11-02T14:20:21.397307Z"}],"euvd":[{"id":"EUVD-2019-6654","description":"In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.","status":"published","published":"2019-09-04T11:04:31Z","modified":"2024-08-05T00:56:22Z","updated_at":"2026-11-03T02:40:35.132035Z"}],"ghsa":[{"id":"GHSA-p39j-chr3-gjhq","title":"In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by...","description":"In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.","status":"published","published":"2022-05-24T16:55:26Z","modified":"2023-01-28T05:06:40Z","updated_at":"2026-11-02T14:44:27.320019Z"}],"nvd":[{"id":"CVE-2019-15718","description":"In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.","status":"published","published":"2019-09-04T12:15:11.17Z","modified":"2026-06-17T02:20:56.243Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:05:25.691233Z"}],"osv":[{"id":"CVE-2019-15718","description":"In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.","status":"published","published":"2019-09-04T12:15:11.17Z","modified":"2026-10-24T10:30:42.047641875Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:11.361782Z"},{"id":"DEBIAN-CVE-2019-15718","description":"In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.","status":"published","published":"2019-09-04T12:15:11.17Z","modified":"2026-09-21T07:01:11.824350283Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"RHSA-2019:3592","title":"Red Hat Security Advisory: systemd security, bug fix, and enhancement update","status":"published","published":"2024-09-16T02:35:24Z","modified":"2026-06-27T10:08:30Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2019-15718","description":"In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.","status":"published","published":"2019-09-03T00:00:00Z","modified":"2026-04-22T12:11:40.649767Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"},{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"MGASA-2019-0330","title":"Updated systemd packages fix security vulnerability","description":"Updated systemd packages fix security vulnerability:\n\nNadav Markus from Palo Alto Networks discovered that systemd-resolved\ndoes not enforce appropriate access controls on its D-Bus interface and\nallows unprivileged users to execute methods that are meant to be\navailable only to privileged users. This can be exploited by local users\nto modify the system's DNS resolver settings (CVE-2019-15718).\n\nThis update also adds various upstream fixes for networkd, resolved,\nupdates the manpages, fixing some logging messages and adds some missing\nchecks that can potentially be used to cause crashes or malfunction.\n\nThe syscall filter list has been updated to properly support newer glibc\nand kernel features with seccomp and nspawn.\n","status":"published","published":"2019-11-19T21:16:53Z","modified":"2026-04-16T04:43:25.26961958Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"USN-4120-1","title":"systemd vulnerability","description":"It was discovered that the systemd-resolved D-Bus interface did not\nenforce appropriate access controls. A local unprivileged user could\nexploit this to modify a system's DNS resolver settings.\n","status":"published","published":"2019-09-03T18:35:24Z","modified":"2026-04-22T09:59:56.215531Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}