Systemd Project : Security Vulnerabilities, CVEs, Published In 2021
basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled by a local attacker) that results in an operating system crash.
Max CVSS
5.5
EPSS Score
0.04%
Published
2021-07-20
Updated
2022-06-14
An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
Max CVSS
6.1
EPSS Score
0.14%
Published
2021-05-10
Updated
2022-10-07
2 vulnerabilities found