[USN-3059-1] xmlrpc-epi vulnerability
marc.deslauriers at canonical.com
Wed Aug 10 17:40:34 UTC 2016
Ubuntu Security Notice USN-3059-1
August 10, 2016
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 LTS
xmlrpc-epi could be made to crash or run programs if it processed specially
- xmlrpc-epi: a XML-RPC request library
It was discovered that xmlrpc-epi incorrectly handled lengths in the
simplestring_addn function. A remote attacker could use this issue to cause
applications using xmlrpc-epi such as PHP to crash, resulting in a denial
of service, or possibly execute arbitrary code.
The problem can be corrected by updating your system to the following
Ubuntu 16.04 LTS:
In general, a standard system update will make all the necessary changes.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: OpenPGP digital signature
More information about the ubuntu-security-announce