An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade NetworkManager-cloud-setupUpgrade NetworkManager-libnm-devel | May 4, 2022 | May 10, 2021 |
| Amazon Linux Ami 2 | — | Upgrade systemd-debuginfoUpgrade systemd-journal-gatewayUpgrade systemd-pythonUpgrade systemd-resolvedUpgrade systemd-develUpgrade systemd-libsUpgrade libgudev1Upgrade libgudev1-develUpgrade systemd-sysvUpgrade systemdUpgrade systemd-networkd | Oct 11, 2022 | May 10, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade NetworkManager-adslUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-bluetoothUpgrade NetworkManager-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-libnmUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-config-serverUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-config-connectivity-centosUpgrade NetworkManager-wwanUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-wifiUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-ovs | Nov 10, 2021 | May 10, 2021 |
| Debian | — | Upgrade systemd | Jul 30, 2024 | May 10, 2021 |
| Gentoo Linux | — | Upgrade sys-apps/systemd. | Jul 21, 2021 | May 10, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade systemd-pythonUpgrade systemd-sysvUpgrade systemd-develUpgrade systemd-libsUpgrade libgudev1-develUpgrade systemdUpgrade libgudev1 | Feb 24, 2022 | May 10, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libgudev1-develUpgrade libgudev1Upgrade systemdUpgrade systemd-pythonUpgrade systemd-develUpgrade systemd-sysvUpgrade systemd-libsUpgrade systemd-udev-compat | Nov 12, 2021 | May 10, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade systemd-develUpgrade systemd-journal-remoteUpgrade systemd-libsUpgrade systemd-pamUpgrade systemd-udev-compatUpgrade systemd-containerUpgrade systemdUpgrade systemd-udev | Nov 2, 2021 | May 10, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade systemd-udevUpgrade systemd-libsUpgrade systemdUpgrade systemd-udev-compatUpgrade systemd-container | Nov 12, 2021 | May 10, 2021 |
| Oracle_linux | — | Upgrade NetworkManager-config-serverUpgrade NetworkManager-config-connectivity-oracleUpgrade NetworkManager-adslUpgrade NetworkManager-libnmUpgrade NetworkManagerUpgrade NetworkManager-teamUpgrade NetworkManager-ovsUpgrade NetworkManager-pppUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-libnm-develUpgrade NetworkManager-wwanUpgrade NetworkManager-wifiUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-bluetoothUpgrade NetworkManager-tui | Nov 17, 2021 | Apr 26, 2021 |
| Redhat_linux | — | Upgrade NetworkManager-debuginfoNo solution existsUpgrade NetworkManager-wwanUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-libnmUpgrade NetworkManager-libnm-develUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManager-bluetoothUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-ovsUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-wifiUpgrade NetworkManager-config-serverUpgrade NetworkManager-debugsourceUpgrade NetworkManager-teamUpgrade NetworkManager-pppUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-ovs-debuginfo | Nov 10, 2021 | May 10, 2021 |
| Rocky_linux | — | Upgrade NetworkManager-pppUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-ovsUpgrade NetworkManager-wifiUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-debuginfoUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-wwanUpgrade NetworkManager-teamUpgrade NetworkManager-debugsourceUpgrade NetworkManager-adslUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-libnmUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-libnm-develUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-bluetooth | Mar 12, 2024 | May 10, 2021 |
| Suse | — | Upgrade systemd-journal-remoteUpgrade systemd-32bitUpgrade libsystemd0-32bitUpgrade libsystemd0Upgrade systemd-develUpgrade libudev-develUpgrade systemd-sysvinitUpgrade udevUpgrade systemd-loggerUpgrade libudev1-32bitUpgrade nss-systemdUpgrade systemd-coredumpUpgrade nss-mymachinesUpgrade libudev-devel-32bitUpgrade nss-resolveUpgrade libudev1Upgrade systemd-docUpgrade nss-myhostname-32bitUpgrade systemd-containerUpgrade nss-mymachines-32bitUpgrade systemd-langUpgrade systemdUpgrade nss-myhostnameUpgrade systemd-network | Aug 24, 2021 | May 10, 2021 |
| Ubuntu | — | Upgrade systemd (Ubuntu Pro)Upgrade systemd | Jul 21, 2021 | May 10, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub