USN-3770-2: Little CMS vulnerabilities
USN-3770-1 fixed a vulnerability in Little CMS. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Pedro Ribeiro discoreved that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2013-4276) Ibrahim El-Sayed discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-10165) Quang Nguyen discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-16435)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-3770-2?
USN-3770-2 addresses a vulnerability that could potentially lead to a denial of service.
How do I fix USN-3770-2?
To fix USN-3770-2, update the affected packages to the specified remedied versions for Ubuntu 12.04.
Which packages are affected by USN-3770-2?
The affected packages in USN-3770-2 include liblcms2-utils, liblcms-utils, liblcms2-2, and liblcms1 for Ubuntu 12.04.
Who discovered the vulnerability in USN-3770-2?
The vulnerability in USN-3770-2 was discovered by Pedro Ribeiro.
Is USN-3770-2 specific to a particular version of Ubuntu?
Yes, USN-3770-2 specifically affects Ubuntu 12.04.