- Vulnerability/
- USN-7465-1
USN-7465-1: Mistral vulnerabilities
First published: Mon Apr 28 2025(Updated: )
It was discovered that Mistral incorrectly handled nested anchors in YAML files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-16848) Pierre Gaxatte discovered that Mistral incorrectly handled erroneous SSH private key filename commands. An attacker could possibly use this issue to expose sensitive information. (CVE-2018-16849) It was discovered that Mistral incorrectly handled the permissions of sensitive log files. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-3866)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/mistral-api | <6.0.0-0ubuntu1.1+esm1 | 6.0.0-0ubuntu1.1+esm1 |
| Ubuntu | =18.04 | |
| All of | ||
| ubuntu/python-mistral | <6.0.0-0ubuntu1.1+esm1 | 6.0.0-0ubuntu1.1+esm1 |
| Ubuntu | =18.04 | |
| All of | ||
| ubuntu/python-mistral-lib | <0.4.0-0ubuntu1+esm1 | 0.4.0-0ubuntu1+esm1 |
| Ubuntu | =18.04 | |
| All of | ||
| ubuntu/mistral-api | <2.0.0-1ubuntu2+esm1 | 2.0.0-1ubuntu2+esm1 |
| Ubuntu | =16.04 | |
| All of | ||
| ubuntu/python-mistral | <2.0.0-1ubuntu2+esm1 | 2.0.0-1ubuntu2+esm1 |
| Ubuntu | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of USN-7465-1?
The severity of USN-7465-1 is classified as potentially high due to the possibility of denial of service attacks.
How do I fix USN-7465-1?
To fix USN-7465-1, you should install the updated packages mentioned in the advisory, specifically for Ubuntu 18.04 LTS.
Which versions of Mistral are affected by USN-7465-1?
USN-7465-1 affects multiple versions of Mistral on Ubuntu 18.04 LTS and is resolved in version 6.0.0-0ubuntu1.1+esm1.
Is USN-7465-1 specific to any product?
Yes, USN-7465-1 specifically impacts the Mistral software packages on Ubuntu 18.04 LTS.
What can an attacker potentially achieve with USN-7465-1?
An attacker could potentially exploit USN-7465-1 to perform denial of service attacks against systems running the affected versions of Mistral.
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/title
- agent/last-modified-date
- agent/references
- agent/source
- agent/type
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/event
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu
- version/ubuntu/18.04
- version/ubuntu/16.04