VDB

DEBIAN-CVE-2018-15686

DEBIAN-CVE-2018-15686 PUBLISHED CVSS 7.800000190734863 HIGH

A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:13systemd0, 0, 0
Debian:14systemd0, 0, 0
Debian:12systemd0, 0, 0
Debian:11systemd0, 0, 0

Timeline

  • Oct 26, 2018 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›