USN-3624-1: Patch vulnerabilities
It was discovered that Patch incorrectly handled certain files. An attacker could possibly use this to cause a denial of service. (CVE-2016-10713) It was discovered that Patch incorrectly handled certain input validation. An attacker could possibly use this to execute arbitrary code. (CVE-2018-1000156) It was discovered that Patch incorrectly handled certain inputs. An attacker could possibly use this to cause a denial of service. (CVE-2018-6951)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/patchto a version that resolves this vulnerability.Fixed in 2.7.5-1ubuntu0.2 - Upgrade
Upgrade
ubuntu/patchto a version that resolves this vulnerability.Fixed in 2.7.5-1ubuntu0.16.04.1 - Upgrade
Upgrade
ubuntu/patchto a version that resolves this vulnerability.Fixed in 2.7.1-4ubuntu2.4 - Upgrade
Upgrade
Patchto a version that resolves this vulnerability.Patch USN-3624-1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-3624-1?
The severity of USN-3624-1 is significant due to the potential for denial of service and arbitrary code execution.
How do I fix USN-3624-1?
To fix USN-3624-1, users should update the 'patch' package to the latest version for their Ubuntu release.
What Ubuntu versions are affected by USN-3624-1?
USN-3624-1 affects Ubuntu versions 14.04, 16.04, and 17.10.
What vulnerabilities are addressed in USN-3624-1?
USN-3624-1 addresses vulnerabilities related to improper input validation and handling in the 'patch' utility.
Can USN-3624-1 be exploited remotely?
Yes, USN-3624-1 vulnerabilities can potentially be exploited remotely if certain files are mishandled by the 'patch' tool.