- Vulnerability/
- USN-2576-2
USN-2576-2: usb-creator vulnerability
First published: Thu Apr 23 2015(Updated: )
USN-2576-1 fixed a vulnerability in usb-creator. This update provides the corresponding fix for Ubuntu 15.04. Original advisory details: Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/usb-creator-common | <0.2.67ubuntu0.1 | 0.2.67ubuntu0.1 |
| Ubuntu gir1.2-packagekitglib-1.0 | =15.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of USN-2576-2?
The severity of USN-2576-2 is considered high due to the potential for local attackers to gain elevated privileges.
How do I fix USN-2576-2?
To fix USN-2576-2, update the usb-creator-common package to version 0.2.67ubuntu0.1 or later.
What systems are affected by USN-2576-2?
USN-2576-2 affects Ubuntu 15.04 systems that have the usb-creator-common package installed.
Who discovered the vulnerability in USN-2576-2?
The vulnerability in USN-2576-2 was discovered by security researcher Tavis Ormandy.
Is there a workaround for USN-2576-2?
There is no officially recommended workaround for USN-2576-2; updating the affected package is the suggested action.
- agent/severity
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/title
- agent/references
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu gir1.2-packagekitglib-1.0
- version/ubuntu gir1.2-packagekitglib-1.0/15.04