https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T06:14:48.413840+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2018-15686 CVE-2018-15686 — systemd: reexec state injection: fgets() on overlong lines leads to line splitting 2026-10-06T06:14:48.638591+00:00

Affected: systemd

A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.

 https://vulnerability.circl.lu/vuln/usn-3816-1 USN-3816-1 — systemd vulnerabilities 2026-10-06T06:14:48.638757+00:00

Affected: Ubuntu:16.04:LTS: systemd, Ubuntu:18.04:LTS: systemd

Jann Horn discovered that unit_deserialize incorrectly handled status messages above a certain length. A local attacker could potentially exploit this via NotifyAccess to inject arbitrary state across re-execution and obtain root privileges. (CVE-2018-15686)

Jann Horn discovered a race condition in chown_one(). A local attacker could potentially exploit this by setting arbitrary permissions on certain files to obtain root privileges. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-15687)

It was discovered that systemd-tmpfiles mishandled symlinks in non-terminal path components. A local attacker could potentially exploit this by gaining ownership of certain files to obtain root privileges. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-6954)