https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T18:55:54.125948+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-15718 CVE-2019-15718 2026-09-28T18:55:54.162475+00:00

In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.

 https://vulnerability.circl.lu/vuln/usn-4120-1 USN-4120-1 — systemd vulnerability 2026-09-28T18:55:54.162582+00:00

Affected: Ubuntu:18.04:LTS: systemd

It was discovered that the systemd-resolved D-Bus interface did not enforce appropriate access controls. A local unprivileged user could exploit this to modify a system's DNS resolver settings.