An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade NetworkManager-cloud-setupUpgrade NetworkManager-libnm-devel | May 4, 2022 | May 10, 2021 |
| Amazon Linux Ami 2 | — | Upgrade systemd-networkdUpgrade systemdUpgrade libgudev1-develUpgrade libgudev1Upgrade systemd-sysvUpgrade systemd-debuginfoUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-libsUpgrade systemd-resolvedUpgrade systemd-journal-gateway | Oct 11, 2022 | May 10, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-debugsourceUpgrade NetworkManager-libnmUpgrade NetworkManager-bluetoothUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManager-team-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-config-connectivity-centosUpgrade NetworkManager-ovsUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-wwanUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-config-serverUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-wifi | Nov 10, 2021 | May 10, 2021 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | May 10, 2021 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Jul 21, 2021 | May 10, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-pythonUpgrade libgudev1-develUpgrade systemd-sysvUpgrade libgudev1Upgrade systemd-develUpgrade systemd-libsUpgrade systemd | Feb 24, 2022 | May 10, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade systemd-udev-compatUpgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-develUpgrade systemd-libsUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd | Nov 12, 2021 | May 10, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-udev-compatUpgrade systemd-pamUpgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemd-libsUpgrade systemdUpgrade systemd-udevUpgrade systemd-container | Nov 2, 2021 | May 10, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-libsUpgrade systemd-udevUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemd | Nov 12, 2021 | May 10, 2021 |
| Oracle_linux | — | Upgrade NetworkManager-wifiUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-wwanUpgrade NetworkManager-tuiUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-bluetoothUpgrade NetworkManager-pppUpgrade NetworkManager-libnm-develUpgrade NetworkManager-adslUpgrade NetworkManager-ovsUpgrade NetworkManager-teamUpgrade NetworkManager-libnmUpgrade NetworkManager-config-serverUpgrade NetworkManagerUpgrade NetworkManager-config-connectivity-oracle | Nov 17, 2021 | Apr 26, 2021 |
| Redhat_linux | — | Upgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-wifiUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-ovsUpgrade NetworkManager-pppUpgrade NetworkManager-config-serverUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-debugsourceUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-libnmUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-wwanUpgrade NetworkManager-libnm-develUpgrade NetworkManager-debuginfoUpgrade NetworkManagerNo solution existsUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManager-bluetooth | Nov 10, 2021 | May 10, 2021 |
| Rocky_linux | — | Upgrade NetworkManager-wifiUpgrade NetworkManager-adslUpgrade NetworkManager-ovsUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-teamUpgrade NetworkManager-debugsourceUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-wwanUpgrade NetworkManager-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-libnmUpgrade NetworkManager-bluetoothUpgrade NetworkManager-tuiUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-libnm-devel | Mar 12, 2024 | May 10, 2021 |
| Suse | — | Upgrade systemd-coredumpUpgrade libudev1-32bitUpgrade systemd-32bitUpgrade nss-systemdUpgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemd-sysvinitUpgrade libsystemd0-32bitUpgrade udevUpgrade systemd-loggerUpgrade libsystemd0Upgrade libudev-develUpgrade systemdUpgrade libudev1Upgrade systemd-containerUpgrade systemd-langUpgrade nss-resolveUpgrade systemd-networkUpgrade nss-mymachinesUpgrade libudev-devel-32bitUpgrade nss-myhostnameUpgrade systemd-docUpgrade nss-myhostname-32bitUpgrade nss-mymachines-32bit | Aug 24, 2021 | May 10, 2021 |
| Ubuntu | — | Upgrade systemdUpgrade systemd (Ubuntu Pro) | Jul 21, 2021 | May 10, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub