NetSight
medium5.9

CVE-2018-1049

In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd res…

Impact

In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted.

Affected products

VendorProductAffected versions
Systemd ProjectSystemd
before 234
RedhatEnterprise Linux
Version 7.0
RedhatEnterprise Linux Aus
Versions 7.4, 7.6
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.4, 7.6
RedhatEnterprise Linux Server Eus
Versions 7.4, 7.5, 7.6
RedhatEnterprise Linux Server Tus
Versions 7.4, 7.6
RedhatEnterprise Linux Workstation
Version 7.0
CanonicalUbuntu Linux
Versions 14.04, 16.04
DebianDebian Linux
Version 8.0

Weakness classification

References