USN-4326-1: libiberty vulnerabilities
It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could use this issue to cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrary code
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libiberty-devto a version that resolves this vulnerability.Fixed in 20170913-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/libiberty-devto a version that resolves this vulnerability.Fixed in 20160215-1ubuntu0.3
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is USN-4326-1.
What is the severity of the libiberty vulnerabilities?
The severity of the libiberty vulnerabilities is not specified in the advisory.
How do I fix the libiberty vulnerabilities?
To fix the libiberty vulnerabilities, update the libiberty-dev package to version 20170913-1ubuntu0.1 for Ubuntu 18.04 and version 20160215-1ubuntu0.3 for Ubuntu 16.04.
What is the impact of the libiberty vulnerabilities?
The impact of the libiberty vulnerabilities can range from a denial of service to possible arbitrary code execution, depending on the specific vulnerability.
Where can I find more information about the libiberty vulnerabilities?
You can find more information about the libiberty vulnerabilities in the Ubuntu security advisories: CVE-2018-12641, CVE-2018-12697, and CVE-2018-12698.