USN-7197-1: Go Networking vulnerability
Guido Vranken discovered that Go Networking handled input to the Parse functions inefficiently. An attacker could possibly use this issue to cause denial of service. This update addresses the issue in the golang-golang-x-net and golang-golang-x-net-dev packages, as well as the library vendored within adsys and juju-core.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7197-1?
USN-7197-1 addresses a denial of service vulnerability identified as CVE-2024-45338.
How do I fix USN-7197-1?
To fix USN-7197-1, update the affected packages to their recommended versions as specified in the Ubuntu security notices.
What packages are affected by USN-7197-1?
The affected packages include adsys, adsys-windows, and golang-golang-x-net-dev across various Ubuntu versions.
Which Ubuntu versions are impacted by USN-7197-1?
USN-7197-1 impacts Ubuntu versions 20.04, 22.04, and 24.04.
Who discovered the USN-7197-1 vulnerability?
The USN-7197-1 vulnerability was discovered by Guido Vranken.