USN-7312-1: openNDS vulnerability
Published Mar 3, 2025
·Updated
It was discovered that openNDS did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
Affected Software
4 affected componentsFixes available
All of the following
ubuntu/opennds-daemon<10.2.0+dfsg-1ubuntu0.24.10.1
10.2.0+dfsg-1ubuntu0.24.10.1
Ubuntu Ubuntu=24.10
All of the following
ubuntu/opennds-daemon<10.2.0+dfsg-1ubuntu0.24.04.1~esm1
10.2.0+dfsg-1ubuntu0.24.04.1~esm1
Ubuntu Ubuntu=24.04
Event History
Mar 3, 2025
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-7312-1?
The severity of USN-7312-1 is significant as it allows potential denial of service or arbitrary code execution.
2
How do I fix USN-7312-1?
To fix USN-7312-1, update the openNDS daemon to version 10.2.0+dfsg-1ubuntu0.24.10.1 or 10.2.0+dfsg-1ubuntu0.24.04.1~esm1 depending on your Ubuntu version.
3
What versions of openNDS are affected by USN-7312-1?
Versions prior to 10.2.0+dfsg-1ubuntu0.24.10.1 and 10.2.0+dfsg-1ubuntu0.24.04.1~esm1 are affected by USN-7312-1.
4
What types of attacks can exploit USN-7312-1?
USN-7312-1 can be exploited to launch denial of service attacks or to execute arbitrary code remotely.
5
Which Ubuntu releases are impacted by USN-7312-1?
USN-7312-1 impacts Ubuntu 24.10 and 24.04.