USN-3341-1: Systemd vulnerability

Ubuntu Security Notice USN-3341-1

27th June, 2017

systemd vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 17.04



• Ubuntu 16.10

Summary

systemd-resolved could be made to crash or run programs if it received
a specially crafted DNS response.

Software description

• systemd
  - system and service manager
  
  

Details

An out-of-bounds write was discovered in systemd-resolved when handling
specially crafted DNS responses. A remote attacker could potentially
exploit this to cause a denial of service (daemon crash) or execute
arbitrary code. (



.

In general, a standard system update will make all the necessary changes.

References