VulnerabilityModified

CVE-2018-1049

In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang.

MEDIUM 5.9EPSS 7.44%

Does this matter?

Lower severity and a low EPSS score (7.44%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 3.1: 5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 7.44% probability · 94th percentile
CISA KEV: Not listed
Weakness: CWE-362
Affected: systemd project/systemd · redhat/enterprise linux · redhat/enterprise linux aus · redhat/enterprise linux desktop · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server eus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · canonical/ubuntu linux · debian/debian linux
Source: secalert@redhat.com

References

http://www.securitytracker.com/id/1041520Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:0260Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1534701Issue Tracking, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/11/msg00017.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/3558-1/Third Party Advisory
http://www.securitytracker.com/id/1041520Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:0260Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1534701Issue Tracking, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/11/msg00017.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/3558-1/Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.