CVE-2018-16888
Medium
Description
It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user (e.g. User field set in the service file), a local attacker who is able to write to the PIDFile of the mentioned service may use this flaw to trick systemd into killing other services and/or privileged processes. Versions before v237 are vulnerable.
SeverityMedium
CVSS4.7
Exploit probability—
Product
Systemd
PublishedJan 14, 2019
First seenJan 14, 2019
Weakness typeCWE-250CWE-250
How to fix
Update
- systemd_project systemd237 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| systemd_project systemd | v < 237 | 237 |
| canonical ubuntu_linux | 16.04, 18.04, 19.10 | — |
| redhat enterprise_linux | 7.0 | — |
| netapp active_iq_performance_analytics_services | No range specified | — |
| netapp element_software | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.