USN-6964-1: ORC vulnerability
Published Aug 15, 2024
·Updated
Noriko Totsuka discovered that ORC incorrectly handled certain crafted file. An attacker could possibly use this issue to execute arbitrary code.
Affected Software
6 affected componentsFixes available
All of the following
ubuntu/liborc-0.4-0t64<1:0.4.38-1ubuntu0.1
1:0.4.38-1ubuntu0.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/liborc-0.4-0<1:0.4.32-2ubuntu0.1
1:0.4.32-2ubuntu0.1
Ubuntu Ubuntu=22.04
All of the following
ubuntu/liborc-0.4-0<1:0.4.31-1ubuntu0.1
1:0.4.31-1ubuntu0.1
Ubuntu Ubuntu=20.04
Event History
Aug 15, 2024
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-6964-1?
USN-6964-1 is rated as a high severity vulnerability due to the potential for arbitrary code execution.
2
How do I fix USN-6964-1?
To fix USN-6964-1, update the affected liborc packages to the latest version specified in the advisories.
3
Which versions of Ubuntu are affected by USN-6964-1?
USN-6964-1 affects Ubuntu 20.04, 22.04, and 24.04 with specific versions of the liborc package.
4
What is the nature of the issue described in USN-6964-1?
The issue in USN-6964-1 is caused by ORC's improper handling of crafted files, potentially allowing for arbitrary code execution.
5
When was USN-6964-1 released?
USN-6964-1 was released by Ubuntu on October 31, 2023.