CVE-2018-15686 — systemd: reexec state injection: fgets() on overlong lines leads to line splitting
A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influenc…
Published: 2018-10-26 · CVSS: 7.0 · CVSS 3.0
A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7