USN-7137-1: recutils vulnerabilities
It was discovered that recutils incorrectly handled memory when parsing comments with the recparser utility. An attacker could possibly use this issue to cause a denial of service or run arbitrary commands. (CVE-2021-46019, CVE-2021-46021, CVE-2021-46022) It was discovered that recutils incorrectly handled memory when parsing CSV files. An attacker could possibly use this issue to cause a denial of service or run arbitrary commands. (CVE-2019-11637, CVE-2019-11638, CVE-2019-11639, CVE-2019-11640) It was discovered that recutils incorrectly handled memory when parsing maliciously crafted recfiles. An attacker could possibly use this issue to cause a denial of service. (CVE-2019-6455, CVE-2019-6456, CVE-2019-6457, CVE-2019-6458, CVE-2019-6459, CVE-2019-6460)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-7137-1?
USN-7137-1 has a medium severity rating due to potential denial of service and the risk of arbitrary command execution.
How do I fix USN-7137-1?
To fix USN-7137-1, upgrade to the specified remedial versions of recutils or librec1 for your Ubuntu version.
Which Ubuntu versions are affected by USN-7137-1?
USN-7137-1 affects Ubuntu versions 16.04, 18.04, 20.04, and 22.04.
What vulnerabilities are addressed in USN-7137-1?
USN-7137-1 addresses vulnerabilities CVE-2021-46019, CVE-2021-46021, and CVE-2021-46022.
What is the potential impact of USN-7137-1?
The potential impact of USN-7137-1 includes the risk of denial of service and the execution of arbitrary commands by an attacker.