Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 19.10: 4173-1 Critical: FreeTDS Denial Of Service Threat

ubuntu
Calendar Grey October 30, 2019
Dist Ubuntu Esm H88
A vulnerability in FreeTDS on Ubuntu impacts various releases, enabling remote system crashes or arbitrary code execution.
FreeTDS could be made to crash or run programs if it received specially crafted network traffic.

Summary

FreeTDS could be made to crash or run programs if it received specially

crafted network traffic.

Software Description:

- freetds: libraries for connecting to MS SQL and Sybase SQL servers

Details:

Felix Wilhelm discovered that FreeTDS incorrectly handled certain types

after a protocol downgrade. A remote attacker could use this issue to cause

FreeTDS to crash, resulting in a denial of service, or possibly execute

arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service remote attack Ubuntu network traffic freetds ancillary crash

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  freetds-bin                     1.1.6-1ubuntu0.1
  libct4                          1.1.6-1ubuntu0.1
  libsybdb5                       1.1.6-1ubuntu0.1
  tdsodbc                         1.1.6-1ubuntu0.1

Ubuntu 19.04:
  freetds-bin                     1.00.104-1ubuntu0.1
  libct4                          1.00.104-1ubuntu0.1
  libsybdb5                       1.00.104-1ubuntu0.1
  tdsodbc                         1.00.104-1ubuntu0.1

Ubuntu 18.04 LTS:
  freetds-bin                     1.00.82-2ubuntu0.1
  libct4                          1.00.82-2ubuntu0.1
  libsybdb5                       1.00.82-2ubuntu0.1
  tdsodbc                         1.00.82-2ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4173-1

CVE-2019-13508

Severity
critical
Lowest
Low
Medium
High
Critical

October 30, 2019

Topics%20covered

Topics Covered

security advisory denial of service remote attack Ubuntu network traffic freetds ancillary crash

Package Information

https://launchpad.net/ubuntu/+source/freetds/1.1.6-1ubuntu0.1
https://launchpad.net/ubuntu/+source/freetds/1.00.104-1ubuntu0.1
https://launchpad.net/ubuntu/+source/freetds/1.00.82-2ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.