USN-4338-1: re2c vulnerability
Published Apr 22, 2020
·Updated
Agostino Sarubbo discovered that re2c incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code.
Affected Software
2 affected componentsFixes available
All of the following
ubuntu/re2c<1.2.1-1ubuntu0.1
1.2.1-1ubuntu0.1
Ubuntu Ubuntu=19.10
Event History
Apr 22, 2020
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-4338-1?
The severity of USN-4338-1 is classified as high due to the potential for remote code execution.
2
How do I fix USN-4338-1?
To fix USN-4338-1, update re2c to version 1.2.1-1ubuntu0.1 or later.
3
Which versions of Ubuntu are affected by USN-4338-1?
Ubuntu 19.10 is affected by USN-4338-1.
4
Can USN-4338-1 lead to data breaches?
Yes, USN-4338-1 can lead to data breaches due to arbitrary code execution vulnerabilities.
5
Who discovered the issue in USN-4338-1?
The issue in USN-4338-1 was discovered by Agostino Sarubbo.