« List of all CVEs

CVE-2018-15688

Out-of-Bounds write in systemd-networkd dhcpv6 option handling

Published: 10/26/2018 Last updated: 6/9/2025 Reserved: 8/22/2018

A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.

CNA assigner: canonical (cc1ad9ee-3454-478d-9317-d3e869d708bc) Requested by: n/a

Metrics

Version Score Severity Vector String
3.0 8.8 High CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Opam packages affected (2)

conf-libudev ocaml-systemd

Products affected (0)

No product listed.

References (18)

Credits (1)