Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2019.0125 systemd vulnerabilities 14 January 2019 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: systemd Publisher: Ubuntu Operating System: Ubuntu Linux variants Impact/Access: Root Compromise -- Remote/Unauthenticated Access Privileged Data -- Remote/Unauthenticated Denial of Service -- Remote/Unauthenticated Resolution: Patch/Upgrade CVE Names: CVE-2018-16866 CVE-2018-16865 CVE-2018-16864 Reference: ESB-2019.0111 Original Bulletin: http://www.ubuntu.com/usn/usn-3855-1 - --------------------------BEGIN INCLUDED TEXT-------------------- Ubuntu Security Notice USN-3855-1 Last Modified: January 11, 2019 Security Bulletin Report:systemd vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: - - Ubuntu 18.10 - - Ubuntu 18.04 LTS - - Ubuntu 16.04 LTS Summary: Several security issues were fixed in systemd. Software Description: - - systemd: system and service manager Details: It was discovered that systemd-journald allocated variable-length buffers= for certain message fields on the stack. A local attacker could potentially exploit this to cause a denial of service, or execute arbitrary code. (CVE-2018-16864) It was discovered that systemd-journald allocated variable-length arrays of objects representing message fields on the stack. A local attacker could potentially exploit this to cause a denial of service, or execute arbitrary code. (CVE-2018-16865) An out-of-bounds read was discovered in systemd-journald. A local attacker could potentially exploit this to obtain sensitive information and bypass ASLR protections. (CVE-2018-16866) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: systemd - 239-7ubuntu10.6 Ubuntu 18.04 LTS: systemd - 237-3ubuntu10.11 Ubuntu 16.04 LTS: systemd - 229-4ubuntu21.15 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://usn.ubuntu.com/usn/usn-3855-1 CVE-2018-16864, CVE-2018-16865, CVE-2018-16866 Package Information: https://launchpad.net/ubuntu/+source/systemd/239-7ubuntu10.6 https://launchpad.net/ubuntu/+source/systemd/237-3ubuntu10.11 https://launchpad.net/ubuntu/+source/systemd/229-4ubuntu21.15 - --------------------------END INCLUDED TEXT-------------------- You have received this e-mail bulletin as a result of your organisation's registration with AusCERT. The mailing list you are subscribed to is maintained within your organisation, so if you do not wish to continue receiving these bulletins you should contact your local IT manager. If you do not know who that is, please send an email to auscert@auscert.org.au and we will forward your request to the appropriate person. NOTE: Third Party Rights This security bulletin is provided as a service to AusCERT's members. As AusCERT did not write the document quoted above, AusCERT has had no control over its content. The decision to follow or act on information or advice contained in this security bulletin is the responsibility of each user or organisation, and should be considered in accordance with your organisation's site policies and procedures. AusCERT takes no responsibility for consequences which may arise from following or acting on information or advice contained in this security bulletin. NOTE: This is only the original release of the security bulletin. It may not be updated when updates to the original are made. If downloading at a later date, it is recommended that the bulletin is retrieved directly from the author's website to ensure that the information is still current. Contact information for the authors of the original document is included in the Security Bulletin above. If you have any questions or need further information, please contact them directly. Previous advisories and external security bulletins can be retrieved from: https://www.auscert.org.au/bulletins/ =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert@auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. =========================================================================== -----BEGIN PGP SIGNATURE----- Comment: http://www.auscert.org.au/render.html?it=1967 iQIVAwUBXDwenmaOgq3Tt24GAQgBAhAAjFLLksuukEgWjy/7D31Q16NBMW17qpZI nufsMkcQolUcnTB6Y5lRmoIZQxgUp6EnQGbbVgCo12vmivOeCzwCH2JAAf6c7XJP CUBB8OxRCQ157QAd3GWSGekqoTYXp6q5ykBedzq7pZivr4BdXuDH93yNPFkB3GFR xj136VO+I+xEu8hQ29xzKr+c3K0/nOcTctVR8zJNXmwit9sApFcRyDniIbEQh4zS 8cQESyNrrlTNG5rPo1ynrXL/FJvdVlarzLLk8ZMT2DMz+PdC5j2F/KQbdXX3C6CA XrywgERNTURFIIiv1tiR3lmxuldkPPfmz4sy1hj6vH5fUoqFikxs6VMS9/dw/46s /DW4wC0zrgRsIuuYwjeFckldsYCBSoUkXTfL0RU6pMzCC9bQi50b/9ZXy67Sn/TI c75rps+geCXWUt7FerYlsIkwCcENKAq1AAEeHVltutZ+X4gjcWwu2TBU8ueoFgb1 N1W3ciOpARjFNoqAN3hrKyxnLvFcRkX5wFQYvFM02xaup8mOZL/SbAzYiO08/44h LlRotincrb/8HIRqoN3/Gz1mN33HQW5zQ88Erc0xzaKeuxqvVX1rKAF/caxjc24m 4Scn82tTENbHgddFvKFVGt6zF98me69FzeZTQQVE0GFuSXT6oux1NwY6vWcSmNDv 2REPIFqrNwY= =fNxN -----END PGP SIGNATURE-----