CVE-2020-13529 log

Source
Severity Low
Remote Yes
Type Denial of service
Description
An exploitable denial-of-service vulnerability exists in systemd-networkd before version 249. A maliciously crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
Group Package Affected Fixed Severity Status Ticket
AVG-1935 systemd 248.3-2 249-2 Low Fixed
Date Advisory Group Package Severity Type
14 Jul 2021 ASA-202107-29 AVG-1935 systemd Low denial of service
References
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1142
https://github.com/systemd/systemd/issues/16774
https://github.com/systemd/systemd/pull/20002
https://github.com/systemd/systemd/commit/38e980a6a5a3442c2f48b1f827284388096d8ca5