systemd CVE-2018-15688 Heap Buffer Overflow Vulnerability

Bugtraq ID:	105745
Class:	Boundary Condition Error
CVE:	CVE-2018-15688
Remote:	Yes
Local:	No
Published:	Oct 26 2018 12:00AM
Updated:	Jan 18 2019 11:00AM
Credit:	Ubuntu Security Team.
Vulnerable:	systemd systemd 0 Redhat Enterprise Linux 7 Oracle Linux 7
Not Vulnerable:

systemd CVE-2018-15688 Heap Buffer Overflow Vulnerability

systemd is prone to a heap-based buffer-overflow vulnerability.

Successfully exploiting this vulnerability can allow remote attackers to execute arbitrary code in the context of the application. Failed attempts will likely result in denial-of-service conditions.

systemd CVE-2018-15688 Heap Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

systemd CVE-2018-15688 Heap Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

systemd CVE-2018-15688 Heap Buffer Overflow Vulnerability

References:

• dhcp6: make sure we have enough space for the DHCP6 option header (systemd)
  
• systemd-resolved Homepage (systemd-resolved)
  
• Bug 1639067 - (CVE-2018-15688) CVE-2018-15688 systemd: Out-of-bounds heap write (Redhat)
  
• Oracle Linux Bulletin - (Oracle)
  
• CVE-2018-15688 (Redhat)