vulnerability
Red Hat: CVE-2020-13529: CVE-2020-13529 systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured (Multiple Advisories)
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
3 | (AV:A/AC:M/Au:N/C:N/I:N/A:P) | May 10, 2021 | Nov 10, 2021 | Jul 9, 2025 |
Severity
3
CVSS
(AV:A/AC:M/Au:N/C:N/I:N/A:P)
Published
May 10, 2021
Added
Nov 10, 2021
Modified
Jul 9, 2025
Description
An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
Solution(s)
no-fix-redhat-rpm-packageredhat-upgrade-networkmanagerredhat-upgrade-networkmanager-adslredhat-upgrade-networkmanager-adsl-debuginforedhat-upgrade-networkmanager-bluetoothredhat-upgrade-networkmanager-bluetooth-debuginforedhat-upgrade-networkmanager-cloud-setupredhat-upgrade-networkmanager-cloud-setup-debuginforedhat-upgrade-networkmanager-config-connectivity-redhatredhat-upgrade-networkmanager-config-serverredhat-upgrade-networkmanager-debuginforedhat-upgrade-networkmanager-debugsourceredhat-upgrade-networkmanager-dispatcher-routing-rulesredhat-upgrade-networkmanager-libnmredhat-upgrade-networkmanager-libnm-debuginforedhat-upgrade-networkmanager-libnm-develredhat-upgrade-networkmanager-ovsredhat-upgrade-networkmanager-ovs-debuginforedhat-upgrade-networkmanager-pppredhat-upgrade-networkmanager-ppp-debuginforedhat-upgrade-networkmanager-teamredhat-upgrade-networkmanager-team-debuginforedhat-upgrade-networkmanager-tuiredhat-upgrade-networkmanager-tui-debuginforedhat-upgrade-networkmanager-wifiredhat-upgrade-networkmanager-wifi-debuginforedhat-upgrade-networkmanager-wwanredhat-upgrade-networkmanager-wwan-debuginfo
References

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.