IM
IronMonkey Threat Research

CVE-2020-13529 MEDIUM

Published: 2021-05-10 | Last Modified: 2024-11-21 | Status: Modified

Description

An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.

Additional Descriptions (1)

Se presenta una vulnerabilidad de denegación de servicio explotable en Systemd 245. Un paquete DHCP FORCERENEW especialmente diseñado puede hacer que un servidor que ejecuta el cliente DHCP sea vulnerable a un ataque de suplantación de DHCP ACK. Un atacante puede falsificar un par de paquetes FORCERENEW y DCHP ACK para reconfigurar el servidor

CVSS Metrics

Base Score: 6.1 (MEDIUM)

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Attack VectorADJACENT_NETWORK
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
ScopeCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.6

Impact Score: 4.0

Base Score: 2.9 (LOW)

AV:A/AC:M/Au:N/C:N/I:N/A:P

Access VectorADJACENT_NETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 5.5

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-290
[email protected] Primary
en CWE-290

Affected Products

Vendor Product Version Update Type
systemd_project systemd 245 <built-in method update of dict object at 0x7fd2dbe0ed00> Application
fedoraproject fedora 33 <built-in method update of dict object at 0x7fd385614e00> Operating System
netapp active_iq_unified_manager - <built-in method update of dict object at 0x7fd2dbe0c200> Application
netapp cloud_backup - <built-in method update of dict object at 0x7fd36971f4c0> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:systemd_project:systemd:245:-:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*
Yes cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

References