systemd/fuzz-netdev-parser: Use-of-uninitialized-value in in_addr_is_null

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5731561064890368 Project: systemd Fuzzer: libFuzzersystemdfuzz-netdev-parser Fuzz target binary: fuzz-netdev-parser Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

Security update for systemd (important)

This update for systemd fixes the following issues: Security issues fixed: - CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 - CVE-2018-15686: A vulnerability in unitdeserializ...

openSUSE: Security Advisory for systemd (openSUSE-SU-2018:3695-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

systemd/fuzz-network-parser: Crash in netdev_get

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5695165612687360 Project: systemd Fuzzer: aflsystemdfuzz-network-parser Fuzz target binary: fuzz-network-parser Job Type: aflasansystemd Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

systemd/fuzz-network-parser: Heap-buffer-overflow in network_free

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5759063753752576 Project: systemd Fuzzer: libFuzzersystemdfuzz-network-parser Fuzz target binary: fuzz-network-parser Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-buffer-overfl...

SUSE-SU-2018:3644-1 Security update for systemd

This update for systemd fixes the following issues: Security issues fixed: - CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 - CVE-2018-15686: A vulnerability in unitdeserializ...

systemd/fuzz-netdev-parser: Heap-buffer-overflow in wireguard_done

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5656248813355008 Project: systemd Fuzzer: libFuzzersystemdfuzz-netdev-parser Fuzz target binary: fuzz-netdev-parser Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-buffer-overflow...

[ASA-201811-11] systemd: multiple issues

Arch Linux Security Advisory ASA-201811-11 ========================================== Severity: Critical Date : 2018-11-07 CVE-ID : CVE-2018-15686 CVE-2018-15687 CVE-2018-15688 Package : systemd Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-789 Summary ======= The...

SUSE-RU-2018:3638-1 Recommended update for ardana-ansible

This update for ardana-ansible fixes the following issues: ardana-ansible: - Initial checkin of info capture tool - Rename dayzero-site.yml bsc1111886 - Switch to non-legacy media layout by default. - Add Keystone Fernet master node monitoring. bsc1097241 - Add restart verb for maintenance update...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0193

An update of 'systemd', 'libxml2' packages of Photon OS has been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0107

An update of 'systemd' packages of Photon OS has been released...

Ubuntu: Security Advisory (USN-3806-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : systemd vulnerability (USN-3806-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3806-1 advisory. Felix Wilhelm discovered that the systemd-networkd DHCPv6 client incorrectly handled certain DHCPv6 messages. In configurations where systemd-networkd...

Critical Photon OS Security Update - PHSA-2018-0193

Updates of 'libxml2', 'systemd' packages of Photon OS have been released...

USN-3806-1 systemd vulnerability

Felix Wilhelm discovered that the systemd-networkd DHCPv6 client incorrectly handled certain DHCPv6 messages. In configurations where systemd-networkd is being used, an attacker on the same network could use this issue to cause systemd-networkd to crash, resulting in a denial of service, or...

USN-3806-1: systemd vulnerability

Felix Wilhelm discovered that the systemd-networkd DHCPv6 client incorrectly handled certain DHCPv6 messages. In configurations where systemd-networkd is being used, an attacker on the same network could use this issue to cause systemd-networkd to crash, resulting in a denial of service, or...

[SECURITY] Fedora 28 Update: systemd-238-10.git438ac26.fc28

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

[SECURITY] Fedora 29 Update: systemd-239-6.git9f3aed1.fc29

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

The vulnerability of the dhcp6optionAppend_ia() function in the Systemd daemon allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the dhcp6optionAppendia function in the Systemd daemon is due to incorrect checking of the temporary buffer size. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code or cause a service failure using a specially crafted packet sent to the...

GLSA-201810-10 : systemd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201810-10 systemd: Multiple vulnerabilities Multiple vulnerabilities have been discovered in systemd. Please review the CVE identifiers referenced below for details. Impact : An attacker could possibly execute arbitrary code, caus...