{"id":"USN-5013-1","summary":"systemd vulnerabilities","details":"It was discovered that systemd incorrectly handled certain mount paths. A\nlocal attacker could possibly use this issue to cause systemd to crash,\nresulting in a denial of service. (CVE-2021-33910)\n\nMitchell Frank discovered that systemd incorrectly handled DHCP FORCERENEW\npackets. A remote attacker could possibly use this issue to reconfigure\nservers. (CVE-2020-13529)\n","modified":"2026-04-27T16:03:37.157722500Z","published":"2021-07-20T15:40:24Z","related":["UBUNTU-CVE-2020-13529","UBUNTU-CVE-2021-33910"],"upstream":["CVE-2020-13529","CVE-2021-33910","UBUNTU-CVE-2020-13529","UBUNTU-CVE-2021-33910"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-5013-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2020-13529"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-33910"}],"affected":[{"package":{"name":"systemd","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/systemd@237-3ubuntu10.49?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"237-3ubuntu10.49"}]}],"versions":["234-2ubuntu12","235-2ubuntu3","235-3ubuntu2","235-3ubuntu3","237-3ubuntu3","237-3ubuntu4","237-3ubuntu6","237-3ubuntu7","237-3ubuntu8","237-3ubuntu10","237-3ubuntu10.2","237-3ubuntu10.3","237-3ubuntu10.4","237-3ubuntu10.6","237-3ubuntu10.9","237-3ubuntu10.11","237-3ubuntu10.12","237-3ubuntu10.13","237-3ubuntu10.15","237-3ubuntu10.17","237-3ubuntu10.19","237-3ubuntu10.20","237-3ubuntu10.21","237-3ubuntu10.22","237-3ubuntu10.23","237-3ubuntu10.24","237-3ubuntu10.25","237-3ubuntu10.26","237-3ubuntu10.28","237-3ubuntu10.29","237-3ubuntu10.31","237-3ubuntu10.33","237-3ubuntu10.38","237-3ubuntu10.39","237-3ubuntu10.40","237-3ubuntu10.41","237-3ubuntu10.42","237-3ubuntu10.43","237-3ubuntu10.44","237-3ubuntu10.45","237-3ubuntu10.46","237-3ubuntu10.47","237-3ubuntu10.48"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libnss-myhostname","binary_version":"237-3ubuntu10.49"},{"binary_version":"237-3ubuntu10.49","binary_name":"libnss-mymachines"},{"binary_version":"237-3ubuntu10.49","binary_name":"libnss-resolve"},{"binary_name":"libnss-systemd","binary_version":"237-3ubuntu10.49"},{"binary_version":"237-3ubuntu10.49","binary_name":"libpam-systemd"},{"binary_name":"libsystemd0","binary_version":"237-3ubuntu10.49"},{"binary_name":"libudev1","binary_version":"237-3ubuntu10.49"},{"binary_name":"systemd","binary_version":"237-3ubuntu10.49"},{"binary_name":"systemd-container","binary_version":"237-3ubuntu10.49"},{"binary_name":"systemd-coredump","binary_version":"237-3ubuntu10.49"},{"binary_name":"systemd-journal-remote","binary_version":"237-3ubuntu10.49"},{"binary_name":"systemd-sysv","binary_version":"237-3ubuntu10.49"},{"binary_name":"systemd-tests","binary_version":"237-3ubuntu10.49"},{"binary_name":"udev","binary_version":"237-3ubuntu10.49"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:18.04:LTS","cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H"},{"score":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2020-13529"},{"id":"CVE-2021-33910","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5013-1.json"}},{"package":{"name":"systemd","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/systemd@245.4-4ubuntu3.10?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"245.4-4ubuntu3.10"}]}],"versions":["242-7ubuntu3","243-2ubuntu1","243-3ubuntu1","244-3ubuntu1","244.1-0ubuntu2","244.1-0ubuntu3","244.2-1ubuntu1","244.3-1ubuntu1","245.2-1ubuntu1","245.2-1ubuntu2","245.4-2ubuntu1","245.4-4ubuntu1","245.4-4ubuntu3","245.4-4ubuntu3.1","245.4-4ubuntu3.2","245.4-4ubuntu3.3","245.4-4ubuntu3.4","245.4-4ubuntu3.5","245.4-4ubuntu3.6","245.4-4ubuntu3.7"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libnss-myhostname","binary_version":"245.4-4ubuntu3.10"},{"binary_name":"libnss-mymachines","binary_version":"245.4-4ubuntu3.10"},{"binary_name":"libnss-resolve","binary_version":"245.4-4ubuntu3.10"},{"binary_name":"libnss-systemd","binary_version":"245.4-4ubuntu3.10"},{"binary_version":"245.4-4ubuntu3.10","binary_name":"libpam-systemd"},{"binary_name":"libsystemd0","binary_version":"245.4-4ubuntu3.10"},{"binary_name":"libudev1","binary_version":"245.4-4ubuntu3.10"},{"binary_version":"245.4-4ubuntu3.10","binary_name":"systemd"},{"binary_version":"245.4-4ubuntu3.10","binary_name":"systemd-container"},{"binary_name":"systemd-coredump","binary_version":"245.4-4ubuntu3.10"},{"binary_version":"245.4-4ubuntu3.10","binary_name":"systemd-journal-remote"},{"binary_name":"systemd-sysv","binary_version":"245.4-4ubuntu3.10"},{"binary_name":"systemd-tests","binary_version":"245.4-4ubuntu3.10"},{"binary_version":"245.4-4ubuntu3.10","binary_name":"systemd-timesyncd"},{"binary_version":"245.4-4ubuntu3.10","binary_name":"udev"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2020-13529","severity":[{"score":"CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"low","type":"Ubuntu"}]},{"id":"CVE-2021-33910","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:20.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-5013-1.json"}}],"schema_version":"1.7.5"}