UBUNTU-CVE-2018-1049

Source
https://ubuntu.com/security/CVE-2018-1049
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-1049.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-1049
Related
Published
2018-01-17T00:00:00Z
Modified
2018-01-17T00:00:00Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
  • 5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted.

References

Affected packages

Ubuntu:14.04:LTS / systemd

Package

Name
systemd
Purl
pkg:deb/ubuntu/systemd?arch=src?distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
204-5ubuntu20.26

Affected versions

Other

204-0ubuntu18
204-0ubuntu19
204-5ubuntu3
204-5ubuntu5
204-5ubuntu6
204-5ubuntu7
204-5ubuntu8
204-5ubuntu9
204-5ubuntu10
204-5ubuntu11
204-5ubuntu13
204-5ubuntu14
204-5ubuntu15
204-5ubuntu16
204-5ubuntu17
204-5ubuntu18
204-5ubuntu19
204-5ubuntu20

204-5ubuntu20.*

204-5ubuntu20.2
204-5ubuntu20.3
204-5ubuntu20.4
204-5ubuntu20.5
204-5ubuntu20.6
204-5ubuntu20.7
204-5ubuntu20.8
204-5ubuntu20.9
204-5ubuntu20.10
204-5ubuntu20.11
204-5ubuntu20.12
204-5ubuntu20.13
204-5ubuntu20.14
204-5ubuntu20.15
204-5ubuntu20.18
204-5ubuntu20.19
204-5ubuntu20.20
204-5ubuntu20.21
204-5ubuntu20.22
204-5ubuntu20.24
204-5ubuntu20.25

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "1:204-5ubuntu20.26",
            "binary_name": "gir1.2-gudev-1.0"
        },
        {
            "binary_version": "1:204-5ubuntu20.26",
            "binary_name": "libgudev-1.0-0"
        },
        {
            "binary_version": "1:204-5ubuntu20.26",
            "binary_name": "libgudev-1.0-0-dbgsym"
        },
        {
            "binary_version": "1:204-5ubuntu20.26",
            "binary_name": "libgudev-1.0-dev"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libpam-systemd"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libpam-systemd-dbgsym"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libsystemd-daemon-dev"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libsystemd-daemon0"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libsystemd-daemon0-dbgsym"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libsystemd-id128-0"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libsystemd-id128-0-dbgsym"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libsystemd-id128-dev"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libsystemd-journal-dev"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libsystemd-journal0"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libsystemd-journal0-dbgsym"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libsystemd-login-dev"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libsystemd-login0"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libsystemd-login0-dbgsym"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libudev-dev"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libudev1"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libudev1-dbgsym"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libudev1-udeb"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "libudev1-udeb-dbgsym"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "python-systemd"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "python-systemd-dbgsym"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "systemd"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "systemd-dbgsym"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "systemd-services"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "systemd-services-dbgsym"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "udev"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "udev-dbgsym"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "udev-udeb"
        },
        {
            "binary_version": "204-5ubuntu20.26",
            "binary_name": "udev-udeb-dbgsym"
        }
    ]
}

Ubuntu:16.04:LTS / systemd

Package

Name
systemd
Purl
pkg:deb/ubuntu/systemd?arch=src?distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
229-4ubuntu21.1

Affected versions

Other

225-1ubuntu9
227-2ubuntu1
227-2ubuntu2
228-1ubuntu2
228-2ubuntu1
228-2ubuntu2
228-3ubuntu1
228-4ubuntu1
228-4ubuntu2
228-5ubuntu1
228-5ubuntu2
228-5ubuntu3
228-6ubuntu1
229-1ubuntu2
229-1ubuntu4
229-2ubuntu1
229-3ubuntu1
229-3ubuntu2
229-4ubuntu1
229-4ubuntu4
229-4ubuntu5
229-4ubuntu6
229-4ubuntu7
229-4ubuntu8
229-4ubuntu10
229-4ubuntu11
229-4ubuntu12
229-4ubuntu13
229-4ubuntu16
229-4ubuntu17
229-4ubuntu19
229-4ubuntu20
229-4ubuntu21

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libnss-myhostname"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libnss-myhostname-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libnss-mymachines"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libnss-mymachines-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libnss-resolve"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libnss-resolve-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libpam-systemd"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libpam-systemd-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libsystemd-dev"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libsystemd-dev-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libsystemd0"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libsystemd0-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libudev-dev"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libudev-dev-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libudev1"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libudev1-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libudev1-udeb"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "libudev1-udeb-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "systemd"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "systemd-container"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "systemd-container-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "systemd-coredump"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "systemd-coredump-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "systemd-dbg"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "systemd-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "systemd-journal-remote"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "systemd-journal-remote-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "systemd-sysv"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "systemd-sysv-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "udev"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "udev-dbgsym"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "udev-udeb"
        },
        {
            "binary_version": "229-4ubuntu21.1",
            "binary_name": "udev-udeb-dbgsym"
        }
    ]
}