USN-6667-1: Cpanel-JSON-XS vulnerability
Published Feb 28, 2024
·Updated
It was discovered that Cpanel-JSON-XS incorrectly decoded certain data. A remote attacker could use this issue to cause Cpanel-JSON-XS to crash, resulting in a denial of service, or possibly obtain sensitive information.
Affected Software
4 affected componentsFixes available
All of the following
ubuntu/libcpanel-json-xs-perl<4.27-1ubuntu0.1
4.27-1ubuntu0.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/libcpanel-json-xs-perl<4.19-1ubuntu0.1
4.19-1ubuntu0.1
Ubuntu Ubuntu=20.04
Event History
Feb 28, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6667-1?
The severity of USN-6667-1 is significant as it can lead to denial of service or sensitive information disclosure.
2
How do I fix USN-6667-1?
To fix USN-6667-1, update the libcpanel-json-xs-perl package to the recommended version for your Ubuntu release.
3
Which versions of Ubuntu are affected by USN-6667-1?
USN-6667-1 affects Ubuntu 22.04 and Ubuntu 20.04 versions.
4
Can USN-6667-1 be exploited remotely?
Yes, USN-6667-1 can be exploited remotely by attackers to cause a crash or expose sensitive information.
5
Is there a known workaround for USN-6667-1?
Currently, there is no official workaround for USN-6667-1; updating the package is advised.