systemd vulnerability

hemlocktree · 02-18-2019, 08:39 PM

https://usn.ubuntu.com/3891-1/

frankbell · 02-19-2019, 08:00 PM

I note that it requires local access to the machine.

Quote:

It was discovered that systemd incorrectly handled certain D-Bus messages. A local unprivileged attacker could exploit this in order to crash the init process, resulting in a system denial-of-service (kernel panic).

Not something I find particularly alarming. If the bad guy is sitting at your computer mucking with it, you've got problems with Systems A, B, and C

, not just with SystemD.

hemlocktree · 02-19-2019, 11:01 PM

i just saw it and figured i'd post it. not making any claims.patch or not patch - that is up to you.

frankbell · 02-20-2019, 09:09 PM

Given that the flaw requires local access to the machine, I'm willing to wait for my SystemD-using distros to issue updates.

If I had computers out in the open where third parties could access them, say in an office or a library, I might react differently, but I'm just a home user with locks on the doors.