Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-13529
HistoryMay 10, 2021 - 12:00 a.m.

CVE-2020-13529

2021-05-1000:00:00
ubuntu.com
ubuntu.com
15

6.1 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

2.9 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

48.8%

An exploitable denial-of-service vulnerability exists in Systemd 245. A
specially crafted DHCP FORCERENEW packet can cause a server running the
DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can
forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.

Bugs

Notes

Author Note
mdeslaur FORCERENEW was temporarily disabled until proper support for RFC6704 is in place
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchsystemd< 237-3ubuntu10.49UNKNOWN
ubuntu20.04noarchsystemd< 245.4-4ubuntu3.10UNKNOWN
ubuntu20.10noarchsystemd< 246.6-1ubuntu1.7UNKNOWN
ubuntu21.04noarchsystemd< 247.3-3ubuntu3.4UNKNOWN
ubuntu21.10noarchsystemd< 248.3-1ubuntu3UNKNOWN
ubuntu22.04noarchsystemd< 248.3-1ubuntu3UNKNOWN
ubuntu22.10noarchsystemd< 248.3-1ubuntu3UNKNOWN
ubuntu23.04noarchsystemd< 248.3-1ubuntu3UNKNOWN
ubuntu23.10noarchsystemd< 248.3-1ubuntu3UNKNOWN
ubuntu14.04noarchsystemd< anyUNKNOWN
Rows per page:
1-10 of 111

6.1 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

2.9 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

48.8%