Skip to content
Fencer Intel
medium 5.9

CVE-2018-1049 json

In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be ser…

published 2018-02-16 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-11703

cvss
5.9
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
7.4%
EPSS 7.4% chance of exploitation in 30 days, percentile 94%
public exploits
0
none known

Summary

In systemd prior to 234 a race condition exists between .mount and .automount units such that automount requests from kernel may not be serviced by systemd resulting in kernel holding the mountpoint and any processes that try to use said mount will hang. A race condition like this may lead to denial of service, until mount points are unmounted.

Patch / fix

  • systemd_project systemd 234
  • systemd Debian 14, Debian 13, Debian 12 234-1

debian advisories DEBIAN-CVE-2018-1049

  • systemd Ubuntu 14.04 LTS 204-5ubuntu20.26
  • systemd Ubuntu 16.04 LTS 229-4ubuntu21.1

ubuntu advisories UBUNTU-CVE-2018-1049

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • systemd RHEL 7 219-42.el7_4.7
  • libgudev1 RHEL 7 219-42.el7_4.7
  • systemd-libs RHEL 7 219-42.el7_4.7
  • systemd-sysv RHEL 7 219-42.el7_4.7
  • systemd-python RHEL 7 219-42.el7_4.7
  • systemd-networkd RHEL 7 219-42.el7_4.7
  • systemd-resolved RHEL 7 219-42.el7_4.7
  • systemd-journal-gateway RHEL 7 219-42.el7_4.7

red hat advisories RHSA-2018:0260

  • systemd SLES for SAP 12 SP3, SLES for SAP 12 SP2, SLES for Raspberry Pi 12 SP2 +6 more 228-150.29.1

suse advisories SUSE-SU-2018:0299-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2018-1049 updated cvss 4.5

systemd: automount: access to automounted volumes can lock up

  • Red Hat Enterprise Linux Client (v. 7) systemd 219-42.el7_4.7, libgudev1 219-42.el7_4.7, systemd-libs 219-42.el7_4.7, systemd-sysv 219-42.el7_4.7, systemd-python 219-42.el7_4.7 Red Hat Enterprise Linux Client Optional (v. 7) systemd-networkd 219-42.el7_4.7, systemd-resolved 219-42.el7_4.7, systemd-journal-gateway 219-42.el7_4.7 Red Hat Enterprise Linux ComputeNode (v. 7) systemd 219-42.el7_4.7, libgudev1 219-42.el7_4.7, systemd-libs 219-42.el7_4.7, systemd-sysv 219-42.el7_4.7, systemd-python 219-42.el7_4.7 Red Hat Enterprise Linux ComputeNode Optional (v. 7) systemd-networkd 219-42.el7_4.7, systemd-resolved 219-42.el7_4.7, systemd-journal-gateway 219-42.el7_4.7 Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) systemd 219-42.el7_4.7, libgudev1 219-42.el7_4.7, systemd-libs 219-42.el7_4.7, systemd-sysv 219-42.el7_4.7, systemd-python 219-42.el7_4.7 Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) systemd-networkd 219-42.el7_4.7, systemd-resolved 219-42.el7_4.7, systemd-journal-gateway 219-42.el7_4.7
    +4 more products
    Red Hat Enterprise Linux Server (v. 7) systemd 219-42.el7_4.7, libgudev1 219-42.el7_4.7, systemd-libs 219-42.el7_4.7, systemd-sysv 219-42.el7_4.7, systemd-python 219-42.el7_4.7 Red Hat Enterprise Linux Server Optional (v. 7) systemd-networkd 219-42.el7_4.7, systemd-resolved 219-42.el7_4.7, systemd-journal-gateway 219-42.el7_4.7 Red Hat Enterprise Linux Workstation (v. 7) systemd 219-42.el7_4.7, libgudev1 219-42.el7_4.7, systemd-libs 219-42.el7_4.7, systemd-sysv 219-42.el7_4.7, systemd-python 219-42.el7_4.7 Red Hat Enterprise Linux Workstation Optional (v. 7) systemd-networkd 219-42.el7_4.7, systemd-resolved 219-42.el7_4.7, systemd-journal-gateway 219-42.el7_4.7
    fixed: vendor fix RHSA-2018:0260
  • Red Hat Enterprise Linux 8 systemd, systemd-pam, systemd-libs, systemd-udev, systemd-tests, systemd-container, +1 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

7.44% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

  • Red Hat, Inc. systemd

Classification

Weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.