USN-3806-1: systemd vulnerability

  • USN-3806-1: systemd vulnerability

    Ubuntu Security Notices wrote:

    systemd vulnerability

    A security issue affects these releases of Ubuntu and its derivatives:

    • Ubuntu 18.10
    • Ubuntu 18.04 LTS
    • Ubuntu 16.04 LTS

    Summary

    systemd-networkd could be made to crash or run programs if it received specially crafted network traffic.

    Software Description

    • systemd - system and service manager

    Details

    Felix Wilhelm discovered that the systemd-networkd DHCPv6 client incorrectly handled certain DHCPv6 messages. In configurations where systemd-networkd is being used, an attacker on the same network could use this issue to cause systemd-networkd to crash, resulting in a denial of service, or possibly execute arbitrary code.

    Update instructions

    The problem can be corrected by updating your system to the following package versions:

    Ubuntu 18.10
    systemd - 239-7ubuntu10.1
    Ubuntu 18.04 LTS
    systemd - 237-3ubuntu10.4
    Ubuntu 16.04 LTS
    systemd - 229-4ubuntu21.6

    To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

    After a standard system update you need to reboot your computer to make all the necessary changes.

    References

    Source: usn.ubuntu.com/3806-1/