[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Remotely exploitable bug in systemd (CVE-2017-9445)



On Sun, 2 Jul 2017, Jimmy Johnson wrote:

How was this problem created in the first place?

  http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-9445.html
%
%  Notes
%   chrisccoulson> I believe this was introduced in v223 by
%    https://github.com/systemd/systemd/commit/a0166609f782da91710dea9183d1bf138538db37
%   chrisccoulson> systemd-resolved is not used by default in
%    Xenial. It is spawned if a user execs the systemd-resolve
%    utility, but that shouldn't impact the system.


Reply to: