systemd CVE-2017-9445 Out-Of-Bounds Write Remote Code Execution Vulnerability

Bugtraq ID:	99302
Class:	Input Validation Error
CVE:	CVE-2017-9445
Remote:	Yes
Local:	No
Published:	Jun 28 2017 12:00AM
Updated:	Jun 28 2017 12:00AM
Credit:	Chris Coulson (Canonical)
Vulnerable:	systemd systemd 233 systemd systemd 229 systemd systemd 228 systemd systemd 214 systemd systemd 213 systemd systemd 209 systemd systemd 208 systemd systemd 207
Not Vulnerable:

systemd CVE-2017-9445 Out-Of-Bounds Write Remote Code Execution Vulnerability

systemd is prone to an remote code-execution vulnerability.

An attacker could exploit this issue to execute arbitrary code in the context of the application.

systemd 233 and prior versions are vulnerable.

systemd CVE-2017-9445 Out-Of-Bounds Write Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

systemd CVE-2017-9445 Out-Of-Bounds Write Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

systemd CVE-2017-9445 Out-Of-Bounds Write Remote Code Execution Vulnerability

References:

• CVE-2017-9445 (Red Hat)
  
• resolved: packet - ensure there is space for IP+UDP headers (systemd)
  
• systemd-resolved Homepage (systemd-resolved)
  
• Bug 1463609 - (CVE-2017-9445) CVE-2017-9445 systemd: Out-of-bounds write in sys (Red Hat)