Findings

CVE-2020-13529

An exploitable denial-of-service vulnerability exists in Systemd 245.

Published May 10, 2021 · updated Oct 14, 2026 · systemd project systemd

An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.

Timeline

Detection, updates, and resolution for this record.

  1. May 10, 2021 · NIST NVD

    Detected

    An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.

  2. Oct 14, 2026 · NIST NVD

    Updated

    An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.

Affected

  • cpe fedoraproject/fedora33
  • cpe netapp/active iq unified managerversion unspecified
  • cpe netapp/cloud backupversion unspecified
  • cpe systemd project/systemd245

Sources

  • CVE.orgCVE-2020-13529

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2020-13529

    An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigu

    nvd.nist.gov

References