USN-3816-2
- Source
- https://ubuntu.com/security/notices/USN-3816-2
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3816-2.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-3816-2
- Related
- Published
- 2018-11-19T22:03:24.923072Z
- Modified
- 2018-11-19T22:03:24.923072Z
- Summary
- systemd vulnerability
- Details
-
USN-3816-1 fixed several vulnerabilities in systemd. However, the fix for CVE-2018-6954 was not sufficient. This update provides the remaining fixes.
We apologize for the inconvenience.
Original advisory details:
Jann Horn discovered that unit_deserialize incorrectly handled status messages above a certain length. A local attacker could potentially exploit this via NotifyAccess to inject arbitrary state across re-execution and obtain root privileges. (CVE-2018-15686)
Jann Horn discovered a race condition in chown_one(). A local attacker could potentially exploit this by setting arbitrary permissions on certain files to obtain root privileges. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-15687)
It was discovered that systemd-tmpfiles mishandled symlinks in non-terminal path components. A local attacker could potentially exploit this by gaining ownership of certain files to obtain root privileges. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-6954)
- References
Affected packages
Ubuntu:16.04:LTS / systemd
Package
- Name
- systemd
- Purl
- pkg:deb/ubuntu/systemd@229-4ubuntu21.9?arch=source&distro=xenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed229-4ubuntu21.9
Affected versions
Other
225-1ubuntu9
227-2ubuntu1
227-2ubuntu2
228-1ubuntu2
228-2ubuntu1
228-2ubuntu2
228-3ubuntu1
228-4ubuntu1
228-4ubuntu2
228-5ubuntu1
228-5ubuntu2
228-5ubuntu3
228-6ubuntu1
229-1ubuntu2
229-1ubuntu4
229-2ubuntu1
229-3ubuntu1
229-3ubuntu2
229-4ubuntu1
229-4ubuntu4
229-4ubuntu5
229-4ubuntu6
229-4ubuntu7
229-4ubuntu8
229-4ubuntu10
229-4ubuntu11
229-4ubuntu12
229-4ubuntu13
229-4ubuntu16
229-4ubuntu17
229-4ubuntu19
229-4ubuntu20
229-4ubuntu21
229-4ubuntu21.*
229-4ubuntu21.1
229-4ubuntu21.2
229-4ubuntu21.3
229-4ubuntu21.4
229-4ubuntu21.5
229-4ubuntu21.6
229-4ubuntu21.8
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnss-myhostname",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libnss-myhostname-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libnss-mymachines",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libnss-mymachines-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libnss-resolve",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libnss-resolve-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libpam-systemd",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libpam-systemd-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libsystemd-dev",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libsystemd-dev-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libsystemd0",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libsystemd0-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libudev-dev",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libudev-dev-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libudev1",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libudev1-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libudev1-udeb",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "libudev1-udeb-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "systemd",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "systemd-container",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "systemd-container-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "systemd-coredump",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "systemd-coredump-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "systemd-dbg",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "systemd-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "systemd-journal-remote",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "systemd-journal-remote-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "systemd-sysv",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "systemd-sysv-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "udev",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "udev-dbgsym",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "udev-udeb",
"binary_version": "229-4ubuntu21.9"
},
{
"binary_name": "udev-udeb-dbgsym",
"binary_version": "229-4ubuntu21.9"
}
]
}
Ubuntu:18.04:LTS / systemd
Package
- Name
- systemd
- Purl
- pkg:deb/ubuntu/systemd@237-3ubuntu10.9?arch=source&distro=bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed237-3ubuntu10.9
Affected versions
Other
234-2ubuntu12
235-2ubuntu3
235-3ubuntu2
235-3ubuntu3
237-3ubuntu3
237-3ubuntu4
237-3ubuntu6
237-3ubuntu7
237-3ubuntu8
237-3ubuntu10
237-3ubuntu10.*
237-3ubuntu10.2
237-3ubuntu10.3
237-3ubuntu10.4
237-3ubuntu10.6
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnss-myhostname",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libnss-myhostname-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libnss-mymachines",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libnss-mymachines-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libnss-resolve",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libnss-resolve-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libnss-systemd",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libnss-systemd-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libpam-systemd",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libpam-systemd-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libsystemd-dev",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libsystemd0",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libsystemd0-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libudev-dev",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libudev1",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libudev1-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "libudev1-udeb",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "systemd",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "systemd-container",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "systemd-container-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "systemd-coredump",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "systemd-coredump-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "systemd-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "systemd-journal-remote",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "systemd-journal-remote-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "systemd-sysv",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "systemd-tests",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "systemd-tests-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "udev",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "udev-dbgsym",
"binary_version": "237-3ubuntu10.9"
},
{
"binary_name": "udev-udeb",
"binary_version": "237-3ubuntu10.9"
}
]
}