CVE-2018-16888 It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user (e.g. User field set in the service f...
MediumCVSS 4.7
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
It was discovered systemd does not correctly check the content of PIDFile files before using it to kill processes. When a service is run from an unprivileged user (e.g. User field set in the service file), a local attacker who is able to write to the PIDFile of the mentioned service may use this flaw to trick systemd into killing other services and/or privileged processes. Versions before v237 are vulnerable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/systemd(Debian:12) | < 237-1 | 237-1 |
| debian/systemd(Debian:13) | < 237-1 | 237-1 |
| debian/systemd(Debian:14) | < 237-1 | 237-1 |
| systemd project systemd | < 237 | 237 |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 19.10 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| netapp active iq performance analytics services | All versions | No fix listed |
| netapp element software | All versions | No fix listed |
| The systemd Project systemd | = v237 | No fix listed |
References
- Debian Security Tracker CVE-2018-16888 vendor-advisory
- RHSA-2019:2091 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- [cassandra-user] 20190809 cassandra does not start with new systemd version mailing-list
- security.netapp.com third-party-advisory
- USN-4269-1 third-party-advisory vendor-advisory