USN-6736-1: klibc vulnerabilities
It was discovered that zlib, vendored in klibc, incorrectly handled pointer arithmetic. An attacker could use this issue to cause klibc to crash or to possibly execute arbitrary code. (CVE-2016-9840, CVE-2016-9841) Danilo Ramos discovered that zlib, vendored in klibc, incorrectly handled memory when performing certain deflating operations. An attacker could use this issue to cause klibc to crash or to possibly execute arbitrary code. (CVE-2018-25032) Evgeny Legerov discovered that zlib, vendored in klibc, incorrectly handled memory when performing certain inflate operations. An attacker could use this issue to cause klibc to crash or to possibly execute arbitrary code. (CVE-2022-37434)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/klibc-utilsto a version that resolves this vulnerability.Fixed in 2.0.13-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/libklibcto a version that resolves this vulnerability.Fixed in 2.0.13-1ubuntu0.1 - Upgrade
Upgrade
ubuntu/klibc-utilsto a version that resolves this vulnerability.Fixed in 2.0.10-4ubuntu0.1 - Upgrade
Upgrade
ubuntu/libklibcto a version that resolves this vulnerability.Fixed in 2.0.10-4ubuntu0.1 - Upgrade
Upgrade
ubuntu/klibc-utilsto a version that resolves this vulnerability.Fixed in 2.0.7-1ubuntu5.2 - Upgrade
Upgrade
ubuntu/libklibcto a version that resolves this vulnerability.Fixed in 2.0.7-1ubuntu5.2 - Upgrade
Upgrade
ubuntu/klibc-utilsto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/libklibcto a version that resolves this vulnerability.Fixed in Ubuntu Pro
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6736-1?
USN-6736-1 has a severity rating indicating that it could lead to crashes or arbitrary code execution.
How do I fix USN-6736-1?
To fix USN-6736-1, update to the recommended package versions listed for your Ubuntu version.
What packages are affected by USN-6736-1?
USN-6736-1 affects klibc-utils and libklibc packages across various Ubuntu releases.
What vulnerabilities are addressed in USN-6736-1?
USN-6736-1 addresses vulnerabilities identified as CVE-2016-9840 and CVE-2016-9841.
Which Ubuntu versions are impacted by USN-6736-1?
USN-6736-1 impacts Ubuntu versions 14.04, 16.04, 18.04, 20.04, 22.04, and 23.10.