CVE-2018-15686

Name of the Vulnerable Software and Affected Versions systemd versions up to and including 239

Description A vulnerability in unit deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation.

Recommendations For systemd versions up to and including 239, update to a version higher than 239 to resolve the issue. As a temporary workaround, consider restricting access to NotifyAccess to minimize the risk of exploitation.