USN-4493-1: cryptsetup vulnerability
Published Sep 14, 2020
·Updated
It was discovered that cryptsetup incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code.
Affected Software
0 affected components
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/cryptsetupto a version that resolves this vulnerability.Fixed in 2:2.2.2-3ubuntu2.2
Event History
Sep 14, 2020
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of USN-4493-1?
The severity of USN-4493-1 is critical due to the potential for arbitrary code execution.
2
How do I fix USN-4493-1?
To fix USN-4493-1, update the cryptsetup package to version 2:2.2.2-3ubuntu2.2 or newer.
3
Which Ubuntu versions are affected by USN-4493-1?
USN-4493-1 affects Ubuntu 20.04 with the cryptsetup package version below 2:2.2.2-3ubuntu2.2.
4
What is the impact of the vulnerability identified in USN-4493-1?
The impact of the vulnerability in USN-4493-1 could allow an attacker to execute arbitrary code on the affected system.
5
Where can I find more information about USN-4493-1?
More information about USN-4493-1 can be found in the Ubuntu security notices.