Orta CVSS 6.1 PoC var
CVE-2020-13529: Systemd: sahtecilikle kimlik doğrulama atlatma
Açıklama (NVD)
An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
Özet bilgiler
- Ürün
- Systemd Project Systemd
- CVSS v3.1
- 6.1
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H - EPSS
- %1,43 (yüzdelik 73)
- CWE
- CWE-290
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| systemd-project-systemd | 245 | 245 | — |
| fedoraproject-fedora | 33 | 33 | — |
| netapp-active-iq-unified-manager | — | — | — |
| netapp-cloud-backup | — | — | — |