An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade NetworkManager-cloud-setupUpgrade NetworkManager-libnm-devel | May 4, 2022 | May 10, 2021 |
| Amazon Linux Ami 2 | — | Upgrade libgudev1Upgrade systemd-sysvUpgrade systemd-networkdUpgrade libgudev1-develUpgrade systemdUpgrade systemd-journal-gatewayUpgrade systemd-pythonUpgrade systemd-debuginfoUpgrade systemd-resolvedUpgrade systemd-develUpgrade systemd-libs | Oct 11, 2022 | May 10, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade NetworkManager-tuiUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-bluetoothUpgrade NetworkManager-debugsourceUpgrade NetworkManager-libnmUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-ovsUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-pppUpgrade NetworkManager-wwanUpgrade NetworkManager-config-connectivity-centosUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-config-serverUpgrade NetworkManager-wifiUpgrade NetworkManager-team | Nov 10, 2021 | May 10, 2021 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | May 10, 2021 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Jul 21, 2021 | May 10, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-sysvUpgrade systemd-pythonUpgrade libgudev1-develUpgrade systemd-develUpgrade libgudev1Upgrade systemdUpgrade systemd-libs | Feb 24, 2022 | May 10, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-udev-compatUpgrade systemd-sysvUpgrade libgudev1Upgrade systemd-develUpgrade systemd-libsUpgrade libgudev1-develUpgrade systemd-pythonUpgrade systemd | Nov 12, 2021 | May 10, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemdUpgrade systemd-udevUpgrade systemd-containerUpgrade systemd-journal-remoteUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-udev-compat | Nov 2, 2021 | May 10, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemdUpgrade systemd-containerUpgrade systemd-udev-compatUpgrade systemd-libsUpgrade systemd-udev | Nov 12, 2021 | May 10, 2021 |
| Oracle_linux | — | Upgrade NetworkManager-wifiUpgrade NetworkManager-tuiUpgrade NetworkManager-bluetoothUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-pppUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-libnm-develUpgrade NetworkManager-wwanUpgrade NetworkManager-teamUpgrade NetworkManagerUpgrade NetworkManager-ovsUpgrade NetworkManager-config-serverUpgrade NetworkManager-adslUpgrade NetworkManager-libnmUpgrade NetworkManager-config-connectivity-oracle | Nov 17, 2021 | Apr 26, 2021 |
| Redhat_linux | — | Upgrade NetworkManager-pppUpgrade NetworkManager-debugsourceUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-config-serverUpgrade NetworkManager-wifiUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-ovsUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-bluetoothNo solution existsUpgrade NetworkManager-tuiUpgrade NetworkManager-wwanUpgrade NetworkManager-libnmUpgrade NetworkManagerUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-libnm-develUpgrade NetworkManager-debuginfo | Nov 10, 2021 | May 10, 2021 |
| Rocky_linux | — | Upgrade NetworkManager-libnm-develUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManager-libnmUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-bluetoothUpgrade NetworkManager-debuginfoUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-adslUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-wwanUpgrade NetworkManager-pppUpgrade NetworkManager-wifiUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-ovsUpgrade NetworkManager-team | Mar 12, 2024 | May 10, 2021 |
| Suse | — | Upgrade systemd-loggerUpgrade libudev-develUpgrade systemd-journal-remoteUpgrade systemd-coredumpUpgrade udevUpgrade systemd-32bitUpgrade nss-systemdUpgrade systemd-sysvinitUpgrade libsystemd0-32bitUpgrade libsystemd0Upgrade systemd-develUpgrade libudev1-32bitUpgrade systemd-docUpgrade nss-resolveUpgrade libudev1Upgrade libudev-devel-32bitUpgrade systemd-langUpgrade systemd-containerUpgrade nss-mymachines-32bitUpgrade systemdUpgrade nss-mymachinesUpgrade systemd-networkUpgrade nss-myhostnameUpgrade nss-myhostname-32bit | Aug 24, 2021 | May 10, 2021 |
| Ubuntu | — | Upgrade systemdUpgrade systemd (Ubuntu Pro) | Jul 21, 2021 | May 10, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub