Andrew Ayer discovered that Systemd improperly handled zero-length notification messages. A local unprivileged attacker could use this to cause a denial of service (init crash leading to system unavailability).
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "229-4ubuntu10",
"binary_name": "libnss-myhostname"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "libnss-mymachines"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "libnss-resolve"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "libpam-systemd"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "libsystemd-dev"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "libsystemd0"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "libudev-dev"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "libudev1"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "systemd"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "systemd-container"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "systemd-coredump"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "systemd-journal-remote"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "systemd-sysv"
},
{
"binary_version": "229-4ubuntu10",
"binary_name": "udev"
}
]
}