USN-3558-1
- Source
- https://ubuntu.com/security/notices/USN-3558-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3558-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-3558-1
- Upstream
- Related
- Published
- 2018-02-05T18:09:43.198258Z
- Modified
- 2025-10-13T04:34:34Z
- Summary
- systemd vulnerabilities
- Details
-
Karim Hossen & Thomas Imbert and Nelson William Gamazo Sanchez independently discovered that systemd-resolved incorrectly handled certain DNS responses. A remote attacker could possibly use this issue to cause systemd to temporarily stop responding, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-15908)
It was discovered that systemd incorrectly handled automounted volumes. A local attacker could possibly use this issue to cause applications to hang, resulting in a denial of service. (CVE-2018-1049)
- References
Affected packages
Ubuntu:14.04:LTS / systemd
Package
- Name
- systemd
- Purl
- pkg:deb/ubuntu/systemd@204-5ubuntu20.26?arch=source&distro=trusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed204-5ubuntu20.26
Affected versions
Other
204-0ubuntu18
204-0ubuntu19
204-5ubuntu3
204-5ubuntu5
204-5ubuntu6
204-5ubuntu7
204-5ubuntu8
204-5ubuntu9
204-5ubuntu10
204-5ubuntu11
204-5ubuntu13
204-5ubuntu14
204-5ubuntu15
204-5ubuntu16
204-5ubuntu17
204-5ubuntu18
204-5ubuntu19
204-5ubuntu20
204-5ubuntu20.*
204-5ubuntu20.2
204-5ubuntu20.3
204-5ubuntu20.4
204-5ubuntu20.5
204-5ubuntu20.6
204-5ubuntu20.7
204-5ubuntu20.8
204-5ubuntu20.9
204-5ubuntu20.10
204-5ubuntu20.11
204-5ubuntu20.12
204-5ubuntu20.13
204-5ubuntu20.14
204-5ubuntu20.15
204-5ubuntu20.18
204-5ubuntu20.19
204-5ubuntu20.20
204-5ubuntu20.21
204-5ubuntu20.22
204-5ubuntu20.24
204-5ubuntu20.25
Ecosystem specific
{
"binaries": [
{
"binary_version": "1:204-5ubuntu20.26",
"binary_name": "gir1.2-gudev-1.0"
},
{
"binary_version": "1:204-5ubuntu20.26",
"binary_name": "libgudev-1.0-0"
},
{
"binary_version": "1:204-5ubuntu20.26",
"binary_name": "libgudev-1.0-dev"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "libpam-systemd"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "libsystemd-daemon-dev"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "libsystemd-daemon0"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "libsystemd-id128-0"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "libsystemd-id128-dev"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "libsystemd-journal-dev"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "libsystemd-journal0"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "libsystemd-login-dev"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "libsystemd-login0"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "libudev-dev"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "libudev1"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "python-systemd"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "systemd"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "systemd-services"
},
{
"binary_version": "204-5ubuntu20.26",
"binary_name": "udev"
}
],
"availability": "No subscription required"
}
Database specific
cves_map
{
"ecosystem": "Ubuntu:14.04:LTS",
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2018-1049"
}
]
}
Ubuntu:16.04:LTS / systemd
Package
- Name
- systemd
- Purl
- pkg:deb/ubuntu/systemd@229-4ubuntu21.1?arch=source&distro=xenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed229-4ubuntu21.1
Affected versions
Other
225-1ubuntu9
227-2ubuntu1
227-2ubuntu2
228-1ubuntu2
228-2ubuntu1
228-2ubuntu2
228-3ubuntu1
228-4ubuntu1
228-4ubuntu2
228-5ubuntu1
228-5ubuntu2
228-5ubuntu3
228-6ubuntu1
229-1ubuntu2
229-1ubuntu4
229-2ubuntu1
229-3ubuntu1
229-3ubuntu2
229-4ubuntu1
229-4ubuntu4
229-4ubuntu5
229-4ubuntu6
229-4ubuntu7
229-4ubuntu8
229-4ubuntu10
229-4ubuntu11
229-4ubuntu12
229-4ubuntu13
229-4ubuntu16
229-4ubuntu17
229-4ubuntu19
229-4ubuntu20
229-4ubuntu21
Ecosystem specific
{
"binaries": [
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "libnss-myhostname"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "libnss-mymachines"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "libnss-resolve"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "libpam-systemd"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "libsystemd-dev"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "libsystemd0"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "libudev-dev"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "libudev1"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "systemd"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "systemd-container"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "systemd-coredump"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "systemd-journal-remote"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "systemd-sysv"
},
{
"binary_version": "229-4ubuntu21.1",
"binary_name": "udev"
}
],
"availability": "No subscription required"
}
Database specific
cves_map
{
"ecosystem": "Ubuntu:16.04:LTS",
"cves": [
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2017-15908"
},
{
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"id": "CVE-2018-1049"
}
]
}