UBUNTU-CVE-2016-10375: Critical severity ubuntu/yodl vulnerability
Published May 26, 2017
·Updated
Yodl before 3.07.01 has a Buffer Over-read in the queuepush function in queue/queuepush.c.
Affected Software
1 affected componentFixes available
ubuntu/yodl<3.06.00-1ubuntu0.1~esm1
3.06.00-1ubuntu0.1~esm1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/yodlto a version that resolves this vulnerability.Fixed in 3.06.00-1ubuntu0.1~esm1
Event History
May 26, 2017
CVE Published
via OSV·05:29 PM
Data Sourced
via OSV·05:29 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which versions are affected?
Yodl versions before 3.07.01 are affected.
2
Can this be exploited remotely without credentials or user interaction?
The provided severity vector indicates network attack access, low attack complexity, no privileges required, and no user interaction required.
3
What is the potential impact of successful exploitation?
The severity vector indicates high impact to confidentiality, integrity, and availability.