Related Vulnerabilities: CVE-2018-15686  

A security issue has been found in systemd up to and including 239, where the use of fgets() allows an attacker to escalate privilege via a crafted service with NotifyAccess.

Severity High

Remote No

Type Privilege escalation

Description

A security issue has been found in systemd up to and including 239, where the use of fgets() allows an attacker to escalate privilege via a crafted service with NotifyAccess.

AVG-789 systemd 239.2-1 239.300-1 Critical Fixed FS#60609

07 Nov 2018 ASA-201811-11 AVG-789 systemd Critical multiple issues

https://bugs.chromium.org/p/project-zero/issues/detail?id=1687
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1796402
https://github.com/systemd/systemd/pull/10447
https://github.com/systemd/systemd/pull/10450