Ubuntu 16.04 LTS USN-2986-1 Critical DoS: Dosfstools Crash Risk

ubuntu

May 31, 2016

dosfstools could be made to crash or run programs if it processed a specially crafted filesystem.

Summary

dosfstools could be made to crash or run programs if it processed a

specially crafted filesystem.

Software Description:

- dosfstools: utilities for making and checking MS-DOS FAT filesystems

Details:

Hanno Böck discovered that dosfstools incorrectly handled certain malformed

filesystems. A local attacker could use this issue to cause dosfstools to

crash, resulting in a denial of service, or possibly execute arbitrary

code.

Topics Covered

security advisory denial of service critical ubuntu dosfstools

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  dosfstools                      3.0.28-2ubuntu0.1

Ubuntu 15.10:
  dosfstools                      3.0.28-1ubuntu0.1

Ubuntu 14.04 LTS:
  dosfstools                      3.0.26-1ubuntu0.1

Ubuntu 12.04 LTS:
  dosfstools                      3.0.12-1ubuntu1.3

In general, a standard system update will make all the necessary changes.