5.9

CVE-2018-1049

In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Systemd Project ≫ Systemd Version < 234
Redhat ≫ Enterprise Linux Version 7.0
Redhat ≫ Enterprise Linux Aus Version 7.4
Redhat ≫ Enterprise Linux Aus Version 7.6
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Debian ≫ Debian Linux Version 8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.15% 0.937
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

https://usn.ubuntu.com/3558-1/
Third Party Advisory
http://www.securitytracker.com/id/1041520
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:0260
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1534701
Patch
Third Party Advisory
Issue Tracking
https://lists.debian.org/debian-lts-announce/2018/11/msg00017.html
Third Party Advisory
Mailing List