USN-4243-1: libbsd vulnerabilities
It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 ESM. (CVE-2016-2090) It was discovered that libbsd incorrectly handled certain strings. An attacker could possibly use this issue to access sensitive information. (CVE-2019-20367)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libbsd0to a version that resolves this vulnerability.Fixed in 0.9.1-2ubuntu0.1 - Upgrade
Upgrade
ubuntu/libbsd0to a version that resolves this vulnerability.Fixed in 0.8.7-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/libbsd0to a version that resolves this vulnerability.Fixed in 0.8.2-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/libbsd0to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/libbsd0to a version that resolves this vulnerability.Fixed in 0.3.0-2ubuntu0.1
Event History
Frequently Asked Questions
What is the severity of USN-4243-1?
The severity of USN-4243-1 is high.
How does libbsd vulnerability (USN-4243-1) affect Ubuntu 14.04 ESM?
The libbsd vulnerability (USN-4243-1) affects Ubuntu 14.04 ESM.
Can the libbsd vulnerability (USN-4243-1) be exploited to execute arbitrary code?
Yes, the libbsd vulnerability (USN-4243-1) can be exploited to execute arbitrary code.
What is the recommended remedy for the libbsd vulnerability (USN-4243-1) in Ubuntu 14.04 ESM?
The recommended remedy for the libbsd vulnerability (USN-4243-1) in Ubuntu 14.04 ESM is to upgrade to version 0.6.0-2ubuntu1+esm1 of libbsd0.
Are there any additional references for the libbsd vulnerability (USN-4243-1)?
Yes, you can find additional references for the libbsd vulnerability (USN-4243-1) at the following links: [link1](https://ubuntu.com/security/CVE-2016-2090), [link2](https://ubuntu.com/security/CVE-2019-20367), [link3](https://launchpad.net/ubuntu/+source/libbsd/0.9.1-2ubuntu0.1).