What’s Vulnerable › Vulnerabilities
CVE-2019-15718
- Severity: medium (CVSS 4.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-09-04 · updated 2026-06-17
Description
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.
Affected products
- Fedoraproject Fedora: 29, 30, 31
- Red Hat Enterprise Linux: 8.0
- RedHat Enterprise Linux Eus: 8.1, 8.2, 8.4
- RedHat Enterprise Linux For Ibm Z Systems 8 S390X: all versions
- RedHat Enterprise Linux For Ibm Z Systems Eus: 8.1, 8.2, 8.4
- RedHat Enterprise Linux For Ibm Z Systems Eus S390X: 8.1, 8.2
- RedHat Enterprise Linux For Power Little Endian: 8.0
- RedHat Enterprise Linux For Power Little Endian Eus: 8.1, 8.2, 8.4
- RedHat Enterprise Linux Server Aus: 8.2, 8.4
- RedHat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions: 8.1, 8.2, 8.4
- RedHat Enterprise Linux Server Tus: 8.2, 8.4
- RedHat Enterprise Linux Server Update Services For Sap Solutions: 8.1, 8.2, 8.4
- Red Hat OpenShift Container Platform 4.18: 4.1
- systemd: 240
References
- http://www.openwall.com/lists/oss-security/2019/09/03/1
- https://access.redhat.com/errata/RHSA-2019:3592
- https://access.redhat.com/errata/RHSA-2019:3941
- https://bugzilla.redhat.com/show_bug.cgi?id=1746057
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRE5IS24XTF5WNZGH2L7GSQJKARBOEGL/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIKGKXZ5OEGOEYURHLJHEMFYNLEGAW5B/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U2WNHRJW4XI6H5YMDG4BUFGPAXWUMUVG/
- http://www.openwall.com/lists/oss-security/2019/09/03/1
- https://access.redhat.com/errata/RHSA-2019:3592
- https://access.redhat.com/errata/RHSA-2019:3941
- https://bugzilla.redhat.com/show_bug.cgi?id=1746057
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRE5IS24XTF5WNZGH2L7GSQJKARBOEGL/
Get alerted when CVE-2019-15718 or the next vulnerability affects your stack