USN-4518-1: xawtv vulnerability

Published Sep 17, 2020

Updated

Matthias Gerstner discovered that xawtv incorrectly handled opening files. A local attacker could possibly use this issue to open and write to arbitrary files and escalate privileges. (CVE-2020-13696)

Affected Software

0 affected components

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/alevtd to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1
Upgrade
Upgrade ubuntu/fbtv to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1
Upgrade
Upgrade ubuntu/pia to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1
Upgrade
Upgrade ubuntu/radio to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1
Upgrade
Upgrade ubuntu/scantv to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1
Upgrade
Upgrade ubuntu/streamer to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1
Upgrade
Upgrade ubuntu/ttv to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1
Upgrade
Upgrade ubuntu/v4l-conf to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1
Upgrade
Upgrade ubuntu/webcam to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1
Upgrade
Upgrade ubuntu/xawtv to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1
Upgrade
Upgrade ubuntu/xawtv-plugin-qt to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1
Upgrade
Upgrade ubuntu/xawtv-plugins to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1
Upgrade
Upgrade ubuntu/xawtv-tools to a version that resolves this vulnerability.
Fixed in 3.103-3+deb8u1build0.16.04.1

Event History

Sep 17, 2020

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2020-13696

Frequently Asked Questions

What is the severity of USN-4518-1?

The severity of USN-4518-1 is significant due to the potential for privilege escalation.

How do I fix USN-4518-1?

To fix USN-4518-1, you should upgrade to the patched version 3.103-3+deb8u1build0.16.04.1.

What software is affected by USN-4518-1?

Affected software for USN-4518-1 includes xawtv, fbtv, and several other packages on Ubuntu 16.04.

What type of vulnerability is addressed in USN-4518-1?

USN-4518-1 addresses a local file handling vulnerability that could allow an attacker to open and write arbitrary files.

Is USN-4518-1 related to a specific CVE?

Yes, USN-4518-1 is related to CVE-2020-13696.