USN-6737-1: GNU C Library vulnerability
Charles Fol discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libc6to a version that resolves this vulnerability.Fixed in 2.38-1ubuntu6.2 - Upgrade
Upgrade
ubuntu/libc6to a version that resolves this vulnerability.Fixed in 2.35-0ubuntu3.7 - Upgrade
Upgrade
ubuntu/libc6to a version that resolves this vulnerability.Fixed in 2.31-0ubuntu9.15
Event History
Frequently Asked Questions
What is the severity of USN-6737-1?
The severity of USN-6737-1 is high due to the potential for denial of service and arbitrary code execution.
How do I fix USN-6737-1?
To fix USN-6737-1, upgrade the GNU C Library to the specified versions 2.38-1ubuntu6.2, 2.35-0ubuntu3.7, or 2.31-0ubuntu9.15 depending on your Ubuntu version.
What systems are affected by USN-6737-1?
USN-6737-1 affects Ubuntu versions 20.04, 22.04, and 23.10 using specific versions of the libc6 package.
Can USN-6737-1 lead to remote exploitation?
Yes, USN-6737-1 can potentially lead to remote exploitation through crafted input sequences.
Who discovered the vulnerability in USN-6737-1?
The vulnerability in USN-6737-1 was discovered by Charles Fol.