Privilege escalation in systemd - CVE-2018-15686

Vulnerability identifier: #VU15675

CSH Severity: Low

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-15686

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain elevated privileges on the target system.

The weakness exists due to an error in unit_deserialize of systemd. A remote attacker can supply arbitrary state across systemd re-execution via NotifyAccess and gain root privileges.

systemd
systemd (Red Hat package)
Arch Linux
Gentoo Linux
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for Power
Red Hat Enterprise Linux for x86_64
Opensuse
Fedora
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)
Dell EMC Data Protection Search

Install update from vendor's website.

systemd (Red Hat package) - update to 219-57.el7_5.9
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.0.0.5.116
Dell EMC Unity Operating Environment (OE) - update to 5.0.0.0.5.116
Dell EMC Data Protection Search - update to 18.2.1
systemd - addressed in versions 238-10.git438ac26.fc28, 239-6.git9f3aed1.fc29

• https://github.com/systemd/systemd/pull/10519

• Multiple vulnerabilities in Systemd
• Gentoo update for systemd
• Arch Linux update for systemd
• OpenSUSE Linux update for systemd
• OpenSUSE Linux update for systemd
• Red Hat update for systemd
• Red Hat update for systemd
• Red Hat Enterprise Linux Server 7.4 update for systemd
• Red Hat Enterprise Linux 7 update for systemd
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Function Cloud Native Environment
• Multiple vulnerabilities in Dell EMC Unity Family
• Multiple vulnerabilities in Dell EMC Search
• Fedora 29 update for systemd
• Fedora 28 update for systemd