USN-9077-1: MiniSSDPd vulnerability
It was discovered that MiniSSDPd incorrectly handled device updates under certain circumstances, leading to a use-after-free. A remote attacker could possibly use this issue to cause MiniSSDPd to crash, resulting in a denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/minissdpdto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/minissdpdto a version that resolves this vulnerability.Fixed in 1.5.20180223-1ubuntu0.1~esm1
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The issue may be triggered by a remote attacker. No local account or authenticated access requirement is stated in the available information.
What is the expected impact of a successful attack?
A successful attack could cause MiniSSDPd to crash, resulting in denial of service. The available information does not state that code execution or data disclosure is possible.