- Vulnerability/
- USN-4852-1
USN-4852-1: VTK vulnerabilities
First published: Mon Mar 15 2021(Updated: )
It was discovered that VTK incorrectly handled certain XML files in the embedded Expat library. An attacker could possibly use this issue to cause a denial of service or expose sensitive information.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libvtk5.10 | <5.10.1+dfsg-2.1ubuntu0.1~esm1 | 5.10.1+dfsg-2.1ubuntu0.1~esm1 |
| Ubuntu Ubuntu | =16.04 | |
| All of | ||
| ubuntu/libvtk5.8 | <5.8.0-14.1ubuntu3+esm1 | 5.8.0-14.1ubuntu3+esm1 |
| Ubuntu Ubuntu | =14.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2018-20843
- https://ubuntu.com/security/CVE-2019-15903
- https://ubuntu.com/security/notices/USN-4040-1
- https://ubuntu.com/security/notices/USN-4040-2
- https://ubuntu.com/security/notices/USN-5455-1
- https://ubuntu.com/security/notices/USN-4202-1
- https://ubuntu.com/security/notices/USN-4335-1
- https://ubuntu.com/security/notices/USN-4165-1
- https://ubuntu.com/security/notices/USN-4132-2
- https://ubuntu.com/security/notices/USN-4132-1
- https://ubuntu.com/security/notices/USN-4852-1 (Advisory)
Frequently Asked Questions
What is the severity of USN-4852-1?
The severity of USN-4852-1 is not specified in the provided information.
How does VTK handle XML files in the embedded Expat library?
VTK incorrectly handles certain XML files in the embedded Expat library.
What can an attacker do with the vulnerability described in USN-4852-1?
An attacker could possibly cause a denial of service or expose sensitive information using this vulnerability.
Which versions of libvtk5.10 are affected by USN-4852-1?
The version 5.10.1+dfsg-2.1ubuntu0.1~esm1 of libvtk5.10 is affected by USN-4852-1.
How can I fix the vulnerability described in USN-4852-1?
To fix the vulnerability, update libvtk5.10 package to version 5.10.1+dfsg-2.1ubuntu0.1~esm1 or higher.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- anchor-related/USN-4040-1
- anchor-related/USN-4040-2
- anchor-related/USN-5455-1
- anchor-related/USN-4202-1
- anchor-related/USN-4335-1
- anchor-related/USN-4165-1
- anchor-related/USN-4132-2
- anchor-related/USN-4132-1
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/16.04
- version/ubuntu ubuntu/14.04