[USN-4919-1] OpenSLP vulnerability
Avital Ostromich
avital.ostromich at canonical.com
Mon Apr 19 23:04:44 UTC 2021
==========================================================================
Ubuntu Security Notice USN-4919-1
April 19, 2021
openslp-dfsg vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 LTS
- Ubuntu 14.04 ESM
Summary:
OpenSLP could be made to crash or run programs as your login if it received
specially crafted network traffic.
Software Description:
- openslp-dfsg: Service Location Protocol library
Details:
It was discovered that OpenSLP did not properly validate URLs. A remote
attacker could use this issue to cause OpenSLP to crash or possibly execute
arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 LTS:
libslp1 1.2.1-11ubuntu0.16.04.2
Ubuntu 14.04 ESM:
libslp1 1.2.1-9ubuntu0.3+esm1
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-4919-1
CVE-2019-5544
Package Information:
https://launchpad.net/ubuntu/+source/openslp-dfsg/1.2.1-11ubuntu0.16.04.2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 495 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20210419/45c87ef8/attachment.sig>
More information about the ubuntu-security-announce
mailing list