USN-4852-1: VTK vulnerabilities
Published Mar 15, 2021
·Updated
It was discovered that VTK incorrectly handled certain XML files in the embedded Expat library. An attacker could possibly use this issue to cause a denial of service or expose sensitive information.
Affected Software
1 affected component
Kitware VTK
Event History
May 10, 2025
Advisory Published
via Ubuntu·03:44 AM
Data Sourced
via Ubuntu·03:44 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of USN-4852-1?
The severity of USN-4852-1 is not specified in the provided information.
2
How does VTK handle XML files in the embedded Expat library?
VTK incorrectly handles certain XML files in the embedded Expat library.
3
What can an attacker do with the vulnerability described in USN-4852-1?
An attacker could possibly cause a denial of service or expose sensitive information using this vulnerability.
4
Which versions of libvtk5.10 are affected by USN-4852-1?
The version 5.10.1+dfsg-2.1ubuntu0.1~esm1 of libvtk5.10 is affected by USN-4852-1.
5
How can I fix the vulnerability described in USN-4852-1?
To fix the vulnerability, update libvtk5.10 package to version 5.10.1+dfsg-2.1ubuntu0.1~esm1 or higher.