Systemd, the Linux system and service manager that has largely replaced init as the master Linux startup and control program, has always had its critics. Now, with Qualys's discovery of a new systemd security bug, systemd will have fewer friends. Successful exploitation of this newest vulnerability enables any unprivileged user to cause a denial of service via a kernel panic. 

In a phrase, "that's bad, that's really bad."

As Bharat Jogi, Qualys's senior manager of Vulnerabilities and Signatures, wrote, "Given the breadth of the attack surface for this vulnerability, Qualys recommends users apply patches for this vulnerability immediately." You can say that again. 

Systemd is used in almost all modern Linux distributions. This particular security hole arrived in the systemd code in April 2015. 

It works by enabling attackers to misuse the alloca() function in a way that would result in memory corruption. This, in turn, allows a hacker to crash systemd and hence the entire operating system. Practically speaking, this can be done by a local attacker mounting a filesystem on a very long path. This causes too much memory space to be used in the systemd stack, which results in a system crash. 

That's the bad news. The good news is that Red Hat Product Security and systemd's developers have immediately patched the hole. 

read more: https://www.zdnet.com/article/nasty-linux-systemd-security-bug-revealed/

Systemd, the Linux system and service manager that has largely replaced init as the master Linux startup and control program, has always had its critics. Now, with Qualys's discovery of a new systemd security bug, systemd will have fewer friends. Successful exploitation of this newest vulnerability enables any unprivileged user to cause a denial of service via a kernel panic. 

In a phrase, "that's bad, that's really bad."

As Bharat Jogi, Qualys's senior manager of Vulnerabilities and Signatures, wrote, "Given the breadth of the attack surface for this vulnerability, Qualys recommends users apply patches for this vulnerability immediately." You can say that again. 

Systemd is used in almost all modern Linux distributions. This particular security hole arrived in the systemd code in April 2015. 

It works by enabling attackers to misuse the alloca() function in a way that would result in memory corruption. This, in turn, allows a hacker to crash systemd and hence the entire operating system. Practically speaking, this can be done by a local attacker mounting a filesystem on a very long path. This causes too much memory space to be used in the systemd stack, which results in a system crash. 

That's the bad news. The good news is that Red Hat Product Security and systemd's developers have immediately patched the hole. 

read more: https://www.zdnet.com/article/nasty-linux-systemd-security-bug-revealed/

Qualsys has found an ugly Linux systemd security hole that can enable any unprivileged user to crash a Linux system. The patch is available, and you should deploy it as soon as possible.
Systemd , the Linux system and service manager that has largely replaced  init  as the master Linux startup and control program, has always had its critics. Now, with  Qualys 's  discovery of a new systemd security bug , systemd will have fewer friends. Successful exploitation of this newest vulnerability enables any unprivileged user to cause a denial of service via a kernel panic. 
In a phrase, "that's bad, that's really bad."

Qualsys has found an ugly Linux systemd security hole that can enable any unprivileged user to crash a Linux system. The patch is available, and you should deploy it as soon as possible.

Systemd, the Linux system and service manager that has largely replaced init as the master Linux startup and control program, has always had its critics. Now, with Qualys's discovery of a new systemd security bug, systemd will have fewer friends. Successful exploitation of this newest vulnerability enables any unprivileged user to cause a denial of service via a kernel panic. 

In a phrase, "that's bad, that's really bad."

As Bharat Jogi, Qualys's senior manager of Vulnerabilities and Signatures, wrote, "Given the breadth of the attack surface for this vulnerability, Qualys recommends users apply patches for this vulnerability immediately." You can say that again. 

Systemd is used in almost all modern Linux distributions. This particular security hole arrived in the systemd code in April 2015. 

It works by enabling attackers to misuse the alloca() function in a way that would result in memory corruption. This, in turn, allows a hacker to crash systemd and hence the entire operating system. Practically speaking, this can be done by a local attacker mounting a filesystem on a very long path. This causes too much memory space to be used in the systemd stack, which results in a system crash. 

That's the bad news. The good news is that Red Hat Product Security and systemd's developers have immediately patched the hole. 

read more: https://www.zdnet.com/article/nasty-linux-systemd-security-bug-revealed/

https://www.zdnet.com/article/nasty-linux-systemd-security-bug-revealed/

Charles,
    If you are still using Ubuntu and have been updating as the
the updates are released, then the patch has already been

Charles,
    If you are still using Ubuntu and have been updating as the the updates are released, then the patch has already been applied.  https://ubuntu.com/security/CVE-2021-33910  That is why we tell people to make sure they keep their OS updated.
Rex

On 7/21/21 2:52 PM, Charles Breaux wrote:

well, I looked for the patch...perhaps you would be so kind as to provide the link to the patch. Thanks

On Wed, Jul 21, 2021 at 12:14 PM Devi Garcia <asphyxiated.god@gmail.com> wrote:

Qualsys has found an ugly Linux systemd security hole that can enable any unprivileged user to crash a Linux system. The patch is available, and you should deploy it as soon as possible.

Systemd, the Linux system and service manager that has largely replaced init as the master Linux startup and control program, has always had its critics. Now, with Qualys's discovery of a new systemd security bug, systemd will have fewer friends. Successful exploitation of this newest vulnerability enables any unprivileged user to cause a denial of service via a kernel panic. 

In a phrase, "that's bad, that's really bad."

As Bharat Jogi, Qualys's senior manager of Vulnerabilities and Signatures, wrote, "Given the breadth of the attack surface for this vulnerability, Qualys recommends users apply patches for this vulnerability immediately." You can say that again. 

Systemd is used in almost all modern Linux distributions. This particular security hole arrived in the systemd code in April 2015. 

It works by enabling attackers to misuse the alloca() function in a way that would result in memory corruption. This, in turn, allows a hacker to crash systemd and hence the entire operating system. Practically speaking, this can be done by a local attacker mounting a filesystem on a very long path. This causes too much memory space to be used in the systemd stack, which results in a system crash. 

That's the bad news. The good news is that Red Hat Product Security and systemd's developers have immediately patched the hole. 

read more: https://www.zdnet.com/article/nasty-linux-systemd-security-bug-revealed/

https://www.zdnet.com/article/nasty-linux-systemd-security-bug-revealed/