USN-4295-1: Rake vulnerability
It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/raketo a version that resolves this vulnerability.Fixed in 12.3.1-3ubuntu0.1 - Upgrade
Upgrade
ubuntu/raketo a version that resolves this vulnerability.Fixed in 12.3.1-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/raketo a version that resolves this vulnerability.Fixed in 10.5.0-2ubuntu0.1
Event History
Frequently Asked Questions
What is the vulnerability ID of this security advisory?
The vulnerability ID of this security advisory is USN-4295-1.
What is the title of this security advisory?
The title of this security advisory is Rake vulnerability.
What is the severity of USN-4295-1?
The severity of USN-4295-1 is not specified.
What is the description of USN-4295-1?
USN-4295-1: Rake vulnerability - It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands.
Which software versions are affected by USN-4295-1?
The following software versions are affected by USN-4295-1: Ubuntu 19.10, Ubuntu 18.04, and Ubuntu 16.04.
How can an attacker exploit USN-4295-1?
An attacker could exploit USN-4295-1 by using certain files to execute arbitrary commands.
Is there a fix available for USN-4295-1?
Yes, there is a fix available for USN-4295-1. Please refer to the associated Ubuntu security advisories for more information.