Alerts This Week
Warning Icon 1 1,149
Alerts This Week
Warning Icon 1 1,149

Ubuntu 19.10, 18.04 LTS Security Advisory: USN-4416-1: glibc DoS Threat

ubuntu
Calendar Grey July 6, 2020
Dist Ubuntu Esm H88
=========================================================================Ubuntu Security Notice USN-
Several security issues were fixed in GNU C Library.

Summary

Several security issues were fixed in GNU C Library.

Software Description:

- glibc: GNU C Library

Details:

Florian Weimer discovered that the GNU C Library incorrectly handled

certain memory operations. A remote attacker could use this issue to cause

the GNU C Library to crash, resulting in a denial of service, or possibly

execute arbitrary code. This issue only affected Ubuntu 16.04 LTS.

(CVE-2017-12133)

It was discovered that the GNU C Library incorrectly handled certain

SSE2-optimized memmove operations. A remote attacker could use this issue

to cause the GNU C Library to crash, resulting in a denial of service, or

possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS.

(CVE-2017-18269)

It was discovered that the GNU C Library incorrectly handled certain

pathname operations. A remote attacker could use this issue to cause the

GNU C Library to crash, resulting in a denial of service, or possibly

execute arbitrary code. This issue on...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu glibc memory issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.10:
  libc6                           2.30-0ubuntu2.2

Ubuntu 18.04 LTS:
  libc6                           2.27-3ubuntu1.2

Ubuntu 16.04 LTS:
  libc6                           2.23-0ubuntu11.2

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4416-1

CVE-2017-12133, CVE-2017-18269, CVE-2018-11236, CVE-2018-11237,

CVE-2018-19591, CVE-2018-6485, CVE-2019-19126, CVE-2019-9169,

CVE-2020-10029, CVE-2020-1751, CVE-2020-1752

Severity
critical
Lowest
Low
Medium
High
Critical

July 06, 2020

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu glibc memory issue

Package Information

https://launchpad.net/ubuntu/+source/glibc/2.30-0ubuntu2.2
https://launchpad.net/ubuntu/+source/glibc/2.27-3ubuntu1.2
https://launchpad.net/ubuntu/+source/glibc/2.23-0ubuntu11.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here