Vulnerability CVE-2020-13529: Information

Description

An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.

Severity: MEDIUM (6.1) Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2020-13529
Published: May 10, 2021
Modified: Nov. 7, 2023
Error type identifier: CWE-290

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
NetworkManagersisyphus1.32.2-alt11.46.0-alt2ALT-PU-2021-2116-1276569Fixed
NetworkManagerp101.32.2-alt11.46.0-alt1.p10.1ALT-PU-2021-2116-1276569Fixed
NetworkManagerp91.18.11-alt1.gite2fdbc2b74821.18.11-alt1.gite2fdbc2b7482ALT-PU-2021-2129-1276659Fixed
NetworkManagerc10f11.32.2-alt11.40.18-alt1.p10.2ALT-PU-2021-2116-1276569Fixed
NetworkManagerc9f21.18.11-alt1.gite2fdbc2b74821.18.11-alt1.gite2fdbc2b7482ALT-PU-2023-1283-1314563Fixed
NetworkManagerp111.32.2-alt11.46.0-alt2ALT-PU-2021-2116-1276569Fixed
systemdsisyphus245.2-alt1255.6-alt2ALT-PU-2020-1560-1248437Fixed
systemdp10245.2-alt1249.17-alt2ALT-PU-2020-1560-1248437Fixed
systemdp9246.16-alt1247.13-alt1ALT-PU-2021-2584-1283283Fixed
systemdc10f1245.2-alt1249.17-alt2ALT-PU-2020-1560-1248437Fixed
systemdp11245.2-alt1255.6-alt2ALT-PU-2020-1560-1248437Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142
  • Exploit
  • Third Party Advisory
https://security.netapp.com/advisory/ntap-20210625-0005/
  • Third Party Advisory
GLSA-202107-48
  • Third Party Advisory
[oss-security] 20210804 Re: Pop!_OS Membership to linux-distros list
  • Mailing List
  • Third Party Advisory
[oss-security] 20210817 Re: Pop!_OS Membership to linux-distros list
  • Mailing List
  • Third Party Advisory
[oss-security] 20210907 Re: Pop!_OS Membership to linux-distros list
  • Mailing List
  • Third Party Advisory
FEDORA-2021-166e461c8d

      1. Configuration 1

        cpe:2.3:a:systemd_project:systemd:245:-:*:*:*:*:*:*

        Configuration 2

        cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

        Configuration 3

        cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
        cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*
    VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
    Version: v24.5.3
    Back to top