CVE-2018-15688: Out-of-Bounds write in systemd-networkd dhcpv6 option handling
Vulnerability summary
CVE-2018-15688 is a high (CVSS 8.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 1.67% chance of exploitation in the next 30 days, higher than 76.7% of scored vulnerabilities.
Not severe (CVSS 8.8, adjacent network); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 7 · Related 6Timeline
- 26-10-2018PublishedVulnerability first disclosed.
- 09-06-2025Last modifiedVulnerability information updated.
Description
A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and including 239.
CVSS metrics
9 scores · 6 sources · 3 versions- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · ChainguardEcosystem advisory · calculated8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- NVDNIST8.8HighCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated8.8HighCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
1.67%
Chance of exploitation in the next 30 days
Percentile
77%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.67% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: adjacent network, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat22 products
- enterprise_linux_desktop7.0
- enterprise_linux_server7.0
- enterprise_linux_server_aus7.6
- enterprise_linux_server_eus7.6
- enterprise_linux_server_tus7.6
Chainguard5 products
- py3-systemdAll versions (No fix recorded)
- py3.10-systemdAll versions (No fix recorded)
- py3.11-systemdAll versions (No fix recorded)
- py3.12-systemdAll versions (No fix recorded)
- py3.13-systemdAll versions (No fix recorded)
Debian3 products
- network-manager< 1.14.4-2
- systemd< 239-11
- debian_linuxEOL8.0
Ubuntu2 products
- network-manager< 1.2.6-0ubuntu0.16.04.3 | < 1.10.6-2ubuntu1.1
- systemd< 229-4ubuntu21.6 | < 237-3ubuntu10.4
Canonical1 product
- ubuntu_linuxEOL16.04 | 18.04 | 18.10
Systemd1 product
- systemd≥ unspecified, ≤ 239
Systemd_project1 product
- systemd≤ 239
7 vendors · 35 products
References
19 links
lists.debian.org/debian-lts-announce/2018/11/msg00017.htmlMailing ListX Refsource MLISTThird Party AdvisoryAdvisory- access.redhat.com/errata/RHSA-2018:3665Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHSA-2019:0049Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- access.redhat.com/errata/RHBA-2019:0327Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
