An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 6.1 · systemd_project, fedoraproject, netappNVD modified 2026-10-14 10:17
Affected (CPE criteria) 4
cpe:2.3:a:systemd_project:systemd:245:-:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
References 15
- http://www.openwall.com/lists/oss-security/2021/08/04/2 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/08/17/3 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/07/3 Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/
- https://security.gentoo.org/glsa/202107-48 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210625-0005/ Third Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142 Exploit, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/08/04/2 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/08/17/3 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/07/3 Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42TMJVNYRY65B4QCJICBYOEIVZV3KUYI/
- https://security.gentoo.org/glsa/202107-48 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210625-0005/ Third Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142 Exploit, Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html