CVE-2018-15686
systemd: reexec state injection: fgets() on overlong lines leads to line splitting
- State
- Published
- Severity
- 7.0 High
- Published
- Oct 26, 2018
- Updated
- Jun 9, 2025
- Reserved
- Aug 22, 2018
Description
A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 7.0 High | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H | canonical |
Weaknesses
- CWE-502 Deserialization of Untrusted Data
Affected Products
| Product | Versions |
|---|---|
systemdsystemd |
|
References
- GLSA-201810-10vendor-advisory
- [debian-lts-announce] 20181119 [SECURITY] [DLA 1580-1] systemd security updatemailing-list
- 105747vdb-entry
- 45714exploit
- USN-3816-1vendor-advisory
- RHSA-2019:2091vendor-advisory
- RHSA-2019:3222vendor-advisory
- RHSA-2020:0593vendor-advisory
- [bookkeeper-issues] 20200729 [GitHub] [bookkeeper] padma81 opened a new issue #2387: Security vulnerabilities in the apache/bookkeeper-4.9.2 imagemailing-list
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://github.com/systemd/systemd/pull/10519
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.