5 ms·
Like introducing an RCE into your init system.
by evgen 7y ago
Like introducing an RCE into your init system.
- bonzini 7y agoLink?
- corprew 7y agoCVE-2017-15908
- the_why_of_y 7y agohttps://nvd.nist.gov/vuln/detail/CVE-2017-15908 https://nvd.nist.gov/vuln/detail/CVE-2017-15908 says this is a infinite loop DoS in systemd-resolved, so it can't be the (hypothetical) bug described by the GP since it's neither a RCE nor in systemd PID1.
- hazeii 7y agoPossibly the IPv6 packet one, CVE-2018-15688? [0] A basic buffer overflow in systemd meant oversized network packets could be used for DoS or "potential code execution". [0] https://www.theregister.co.uk/2018/10/26/systemd_dhcpv6_rce/ https://www.theregister.co.uk/2018/10/26/systemd_dhcpv6_rce/
- bonzini 7y agoGood one but not in PID 1, in fact networkd is probably the "most optional" of all systemd components.