CVE-2016-7795

Published: Oct 13, 2016Modified: May 6, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The manager_invoke_notify_message function in systemd 231 and earlier allows local users to cause a denial of service (assertion failure and PID 1 hang) via a zero-length message received over a notify socket.

Affected (2)

Products: Canonical: Ubuntu Linux · Systemd Project: Systemd

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 16.04

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Systemd Project Systemd	Up to 231

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (18)

http://rhn.redhat.com/errata/RHSA-2016-2610.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2016-2694.html

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2016/09/28/9

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/09/30/1

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/93223

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037320

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-3094-1

Source: cve@mitre.org

Third Party Advisory

https://github.com/systemd/systemd/issues/4234

Source: cve@mitre.org

ExploitPatchThird Party Advisory

https://www.agwa.name/blog/post/how_to_crash_systemd_in_one_tweet

Source: cve@mitre.org

ExploitTechnical DescriptionThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2610.html