CVE-2020-13529

Name of the Vulnerable Software and Affected Versions Systemd version 245

Description An exploitable denial-of-service issue exists due to a DHCP ACK spoofing attack. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable. An attacker can forge a pair of FORCERENEW and DHCP ACK packets to reconfigure the server. This issue is related to authentication bypass via spoofing, allowing a remote attacker to cause a denial of service.

Recommendations For Systemd version 245, consider disabling the DHCP client until a patch is available to prevent exploitation. Restrict access to the DHCP service to minimize the risk of spoofing attacks. Avoid using the DHCP FORCERENEW packet in the affected setup until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.