CVE-2018-15686

HIGH

Canonical Ubuntu Linux < 239 - Insecure Deserialization

Title source: rule

Description

A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.

Exploits (2)

nomisec WORKING POC
by hpcprofessional · poc
https://github.com/hpcprofessional/remediate_cesa_2019_2091
exploitdb WORKING POC VERIFIED
by Google Security Research · cdoslinux
https://www.exploit-db.com/exploits/45714

References (11)

Scores

CVSS v3 7.8
EPSS 0.0153
EPSS Percentile 81.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-502
Status published

Affected Products (6)

canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
debian/debian_linux
systemd_project/systemd < 239
oracle/communications_cloud_native_core_network_function_cloud_native_environment

Timeline

Published Oct 26, 2018
Tracked Since Feb 18, 2026