Description
An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a Systemd
Canonical Ubuntu 20.04 LTS, Systemd 245affected
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142 ↗
- https://security.gentoo.org/glsa/202107-48 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/ ↗
- http://www.openwall.com/lists/oss-security/2021/08/04/2 ↗
- http://www.openwall.com/lists/oss-security/2021/08/17/3 ↗
- http://www.openwall.com/lists/oss-security/2021/09/07/3 ↗
- https://security.netapp.com/advisory/ntap-20210625-0005/ ↗
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html ↗