USN-3466-1: systemd vulnerability
26 October 2017
systemd could be made to temporarily stop responding if it received specially crafted network traffic.
Releases
Packages
- systemd - system and service manager
Details
Karim Hossen & Thomas Imbert and Nelson William Gamazo Sanchez
independently discovered that systemd-resolved incorrectly
handled certain DNS responses. A remote attacker could possibly use this
issue to cause systemd to temporarily stop responding, resulting in a
denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 17.10
Ubuntu 17.04
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-3558-1: systemd-journal-remote, libnss-mymachines, udev, python-systemd, libsystemd-dev, systemd, systemd-container, libsystemd-id128-dev, libudev-dev, libsystemd-id128-0, libsystemd-login-dev, libgudev-1.0-0, libudev1-udeb, udev-udeb, systemd-coredump, libsystemd0, libpam-systemd, libsystemd-journal-dev, libsystemd-journal0, systemd-services, libsystemd-daemon-dev, libnss-myhostname, libsystemd-daemon0, libudev1, libnss-resolve, libsystemd-login0, libgudev-1.0-dev, systemd-sysv, gir1.2-gudev-1.0