freedesktop systemd CVE-2018-1049 vulnerability in FreeDesktop and Other Products
Published on February 16, 2018

product logo product logo product logo product logo product logo
In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted.

Vendor Advisory Vendor Advisory NVD

Weakness Type

What is a Race Condition Vulnerability?

The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

CVE-2018-1049 has been classified to as a Race Condition vulnerability or weakness.


Products Associated with CVE-2018-1049

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-1049 are published in these products:

FreeDesktop Systemd
 
Canonical Ubuntu Linux
 
Debian Linux
 
Red Hat Enterprise Linux (RHEL)
 
Red Hat Enterprise Linux Aus
 
Red Hat Enterprise Linux Desktop
 
Red Hat Enterprise Linux Server
 
Red Hat Enterprise Linux Server Aus
 
Red Hat Enterprise Linux Server Eus
 
Red Hat Enterprise Linux Server Tus
 
Red Hat Enterprise Linux Workstation
 
Systemdproject Systemd
 

Affected Versions

Red Hat, Inc. systemd Version prior to 234 is affected by CVE-2018-1049

Exploit Probability

EPSS
0.82%
Percentile
73.63%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.