Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 568
Alerts This Week
Warning Icon 1 568

Ubuntu 16.04 LTS USN-4002-1 Moderate: Doxygen Execution Risk

ubuntu
Calendar Grey June 3, 2019
Dist Ubuntu Esm H88
Security flaw in Ubuntu allows execution of scripts via carefully crafted requests in Doxygen.
Doxygen could be made to run scripts as your login if it received a specially crafted query.

Summary

Doxygen could be made to run scripts as your login if it received a

specially crafted query.

Software Description:

- doxygen: Documentation system for C, C++, Java, Python and other

languages

Details:

It was discovered that Doxygen incorrectly handled certain queries.

An attacker could possibly use this issue to execute arbitrary code

and compromise sensitive information.

Topics%20covered

Topics Covered

security advisory arbitrary code execution ubuntu doxygen

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  doxygen                         1.8.11-1ubuntu0.1

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-4002-1

  CVE-2016-10245

Severity
medium
Lowest
Low
Medium
High
Critical

June 03, 2019

Topics%20covered

Topics Covered

security advisory arbitrary code execution ubuntu doxygen

Package Information

  https://launchpad.net/ubuntu/+source/doxygen/1.8.11-1ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.