- Vulnerability/
- USN-3770-2
USN-3770-2: Little CMS vulnerabilities
First published: Thu Sep 20 2018(Updated: )
USN-3770-1 fixed a vulnerability in Little CMS. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Pedro Ribeiro discoreved that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2013-4276) Ibrahim El-Sayed discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-10165) Quang Nguyen discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-16435)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/liblcms2-utils | <2.2+git20110628-2ubuntu3.3 | 2.2+git20110628-2ubuntu3.3 |
| Ubuntu | =12.04 | |
| All of | ||
| ubuntu/liblcms-utils | <1.19.dfsg-1ubuntu3.1 | 1.19.dfsg-1ubuntu3.1 |
| Ubuntu | =12.04 | |
| All of | ||
| ubuntu/liblcms2-2 | <2.2+git20110628-2ubuntu3.3 | 2.2+git20110628-2ubuntu3.3 |
| Ubuntu | =12.04 | |
| All of | ||
| ubuntu/liblcms1 | <1.19.dfsg-1ubuntu3.1 | 1.19.dfsg-1ubuntu3.1 |
| Ubuntu | =12.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2013-4276
- https://ubuntu.com/security/CVE-2016-10165
- https://ubuntu.com/security/CVE-2018-16435
- https://ubuntu.com/security/notices/USN-3770-1
- https://launchpad.net/ubuntu/+source/lcms2/2.2+git20110628-2ubuntu3.3
- https://launchpad.net/ubuntu/+source/lcms/1.19.dfsg-1ubuntu3.1
- https://ubuntu.com/security/notices/USN-3770-2 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of USN-3770-2?
USN-3770-2 addresses a vulnerability that could potentially lead to a denial of service.
How do I fix USN-3770-2?
To fix USN-3770-2, update the affected packages to the specified remedied versions for Ubuntu 12.04.
Which packages are affected by USN-3770-2?
The affected packages in USN-3770-2 include liblcms2-utils, liblcms-utils, liblcms2-2, and liblcms1 for Ubuntu 12.04.
Who discovered the vulnerability in USN-3770-2?
The vulnerability in USN-3770-2 was discovered by Pedro Ribeiro.
Is USN-3770-2 specific to a particular version of Ubuntu?
Yes, USN-3770-2 specifically affects Ubuntu 12.04.
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/title
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- anchor-related/USN-3770-1
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu
- version/ubuntu/12.04