Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Ubuntu 16.04 LTS iucode-tool DoS: USN-3186-1 Update Required

ubuntu
Calendar Grey February 1, 2017
Scroller Ubuntu Esm H88
Ubuntu users alerted to iucode-tool vulnerability that could lead to potential DoS or arbitrary code execution risks. Immediate update advised.
iucode-tool could be made to crash or run programs if it opened a specially crafted file.

Summary

iucode-tool could be made to crash or run programs if it opened a specially

crafted file.

Software Description:

- iucode-tool: Intel processor microcode tool

Details:

It was discovered that iucode-tool incorrectly handled certain microcodes

when using the -tr loader. If a user were tricked into processing a

specially crafted microcode, a remote attacker could use this issue to

cause iucode-tool to crash, resulting in a denial of service, or possibly

execute arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service arbitrary code execution ubuntu iucode-tool

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  iucode-tool                     1.6.1-1ubuntu0.1

Ubuntu 16.04 LTS:
  iucode-tool                     1.5.1-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

CVE-2017-0357

Severity
critical
Lowest
Low
Medium
High
Critical

February 01, 2017

Topics%20covered

Topics Covered

security advisory denial of service arbitrary code execution ubuntu iucode-tool

Package Information

https://launchpad.net/ubuntu/+source/iucode-tool/1.6.1-1ubuntu0.1
https://launchpad.net/ubuntu/+source/iucode-tool/1.5.1-1ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.