CVE-2019-15718 Privilege escalation in n/a
An unprivileged user can exploit a systemd-resolved flaw to execute restricted D-Bus methods and modify system DNS resolver settings.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-15718?
CVE-2019-15718 is a medium-severity vulnerability in Fedoraproject Fedora, published on 4 Sep 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.
Which versions are affected by CVE-2019-15718?
It affects 14 products.
Linux distribution packages (16)
systemd Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-container Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-container-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-devel Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-journal-remote Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-journal-remote-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-libs Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-libs-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-pam Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-pam-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-tests Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-tests-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-udev Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
systemd-udev-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 0:239-18.el8 |
Products include Fedoraproject Fedora, Redhat Enterprise Linux, Redhat Enterprise Linux Eus, Redhat Enterprise Linux for Ibm Z Systems 8 S390x, Redhat Enterprise Linux for Ibm Z Systems Eus, Redhat Enterprise Linux for Ibm Z Systems Eus S390x and 8 more.
How do I fix CVE-2019-15718?
Apply the vendor's patch.
Is CVE-2019-15718 being exploited?
There is no known exploitation of CVE-2019-15718 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as DEBIAN-CVE-2019-15718, GHSA-p39j-chr3-gjhq, MGASA-2019-0330, RHSA-2019:3592, UBUNTU-CVE-2019-15718, USN-4120-1.