=========================================================================Ubuntu Security Notice USN-3806-1
November 05, 2018

systemd vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.10
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

systemd-networkd could be made to crash or run programs if it received
specially crafted network traffic.

Software Description:
- systemd: system and service manager

Details:

Felix Wilhelm discovered that the systemd-networkd DHCPv6 client
incorrectly handled certain DHCPv6 messages. In configurations where
systemd-networkd is being used, an attacker on the same network could use
this issue to cause systemd-networkd to crash, resulting in a denial of
service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  systemd                         239-7ubuntu10.1

Ubuntu 18.04 LTS:
  systemd                         237-3ubuntu10.4

Ubuntu 16.04 LTS:
  systemd                         229-4ubuntu21.6

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-3806-1
  CVE-2018-15688

Package Information:
  https://launchpad.net/ubuntu/+source/systemd/239-7ubuntu10.1
  https://launchpad.net/ubuntu/+source/systemd/237-3ubuntu10.4
  https://launchpad.net/ubuntu/+source/systemd/229-4ubuntu21.6

Ubuntu 3806-1: systemd vulnerability

November 5, 2018
systemd-networkd could be made to crash or run programs if it received specially crafted network traffic.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: systemd 239-7ubuntu10.1 Ubuntu 18.04 LTS: systemd 237-3ubuntu10.4 Ubuntu 16.04 LTS: systemd 229-4ubuntu21.6 After a standard system update you need to reboot your computer to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-3806-1

CVE-2018-15688

Severity
November 05, 2018

Package Information

https://launchpad.net/ubuntu/+source/systemd/239-7ubuntu10.1 https://launchpad.net/ubuntu/+source/systemd/237-3ubuntu10.4 https://launchpad.net/ubuntu/+source/systemd/229-4ubuntu21.6

Related News