USN-4326-1: libiberty vulnerabilities
It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could use this issue to cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrary code
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is USN-4326-1.
What is the severity of the libiberty vulnerabilities?
The severity of the libiberty vulnerabilities is not specified in the advisory.
How do I fix the libiberty vulnerabilities?
To fix the libiberty vulnerabilities, update the libiberty-dev package to version 20170913-1ubuntu0.1 for Ubuntu 18.04 and version 20160215-1ubuntu0.3 for Ubuntu 16.04.
What is the impact of the libiberty vulnerabilities?
The impact of the libiberty vulnerabilities can range from a denial of service to possible arbitrary code execution, depending on the specific vulnerability.
Where can I find more information about the libiberty vulnerabilities?
You can find more information about the libiberty vulnerabilities in the Ubuntu security advisories: CVE-2018-12641, CVE-2018-12697, and CVE-2018-12698.