Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Ubuntu 4378-1 Moderate: Flask Denial Of Service Memory Issue

ubuntu
Calendar Grey June 1, 2020
Dist Ubuntu Esm H88
A security issue in Flask on Ubuntu could result in memory issues and potential exploits through specially prepared input. It's recommended to perform updates.
Flask could be made to consume a large amount of memory if it received a specially crafted input.

Summary

Flask could be made to consume a large amount of memory if it

received a specially crafted input.

Software Description:

- flask: Micro web framework based on Werkzeug and Jinja2

Details:

It was discovered that Flask incorrectly handled certain inputs.

An attacker could possibly use this issue to cause a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service memory issue ubuntu flask

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  python-flask                    0.12.2-3ubuntu0.1
  python3-flask                   0.12.2-3ubuntu0.1

Ubuntu 16.04 LTS:
  python-flask                    0.10.1-2ubuntu0.1
  python3-flask                   0.10.1-2ubuntu0.1

Ubuntu 14.04 ESM:
  python-flask                    0.10.1-2ubuntu0.1~esm1
  python3-flask                   0.10.1-2ubuntu0.1~esm1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4378-1

CVE-2018-1000656

June 01, 2020

Topics%20covered

Topics Covered

security advisory denial of service memory issue ubuntu flask

Package Information

https://launchpad.net/ubuntu/+source/flask/0.12.2-3ubuntu0.1
https://launchpad.net/ubuntu/+source/flask/0.10.1-2ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.