PT-2018-2737 · Systemd+5 · Systemd+5
Pedro Sampaio
·
Publicado
2017-07-17
·
Atualizado
2022-01-31
·
CVE-2018-1049
CVSS v3.1
5.9
Média
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
systemd versions prior to 234
Description
The issue is related to a race condition between .mount and .automount units in systemd. This condition may cause the kernel to hold a mountpoint, leading to processes hanging when trying to use the mount. The race condition can result in a denial of service until the mount points are unmounted. The vulnerability is also described as being related to the simultaneous use of a shared resource and synchronization errors, which can be exploited by a remote attacker to cause a denial of service.
Recommendations
For versions prior to 234, update to version 234 or later to resolve the issue.
At the moment, there is no other information about additional mitigation measures for this vulnerability.
Correção
DoS
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Red Hat
Suse
Ubuntu
Systemd