8.8

CVE-2018-15688

Out-of-Bounds write in systemd-networkd dhcpv6 option handling

A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Systemd Project ≫ Systemd Version <= 239
Debian ≫ Debian Linux Version8.0
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version18.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.68% 0.739
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 5.8 6.5 6.4
AV:A/AC:L/Au:N/C:P/I:P/A:P
security@ubuntu.com 8.8 2.8 5.9
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://access.redhat.com/errata/RHBA-2019:0327
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/11/msg00017.html
Third Party Advisory
Mailing List
https://security.gentoo.org/glsa/201810-10
Third Party Advisory
http://www.securityfocus.com/bid/105745
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:3665
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0049
Third Party Advisory
https://github.com/systemd/systemd/pull/10518
Patch
Third Party Advisory
https://usn.ubuntu.com/3806-1/
Third Party Advisory
https://usn.ubuntu.com/3807-1/
Third Party Advisory