USN-6781-1: Spreadsheet::ParseExcel vulnerability
Le Dinh Hai discovered that Spreadsheet::ParseExcel was passing unvalidated input from a file into a string-type "eval". An attacker could craft a malicious file to achieve arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6781-1?
The severity of USN-6781-1 is considered critical due to the potential for arbitrary code execution.
How do I fix USN-6781-1?
To fix USN-6781-1, upgrade to the latest version of libspreadsheet-parseexcel-perl as specified by your Ubuntu version.
Which versions of Ubuntu are affected by USN-6781-1?
USN-6781-1 affects Ubuntu 14.04, 16.04, 18.04, 20.04, and 22.04 due to unvalidated input in the libspreadsheet-parseexcel-perl package.
What type of vulnerability is reported in USN-6781-1?
USN-6781-1 reports a vulnerability related to arbitrary code execution caused by the improper handling of untrusted input in the libspreadsheet-parseexcel-perl package.
Who discovered the vulnerability in USN-6781-1?
The vulnerability in USN-6781-1 was discovered by security researcher Le Dinh Hai.