Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Ubuntu 16.04 LTS: USN-4507-1 Critical Security Advisory for ncmpc

ubuntu
Calendar Grey September 16, 2020
Dist Ubuntu Esm H88
Ubuntu Security Advisory USN-4508-1 tackles the vulnerability in ncmpc leading to potential crashes caused by excessively long playlist names.
ncmpc could be made to crash if it received a long chat message.

Summary

ncmpc could be made to crash if it received a long chat message.

Software Description:

- ncmpc: ncurses-based audio player

Details:

It was discovered that ncmpc incorrectly handled long chat messages. A remote

attacker could possibly exploit this with a crafted chat message, causing ncmpc

to crash, resulting in a denial of service. (CVE-2018-9240)

Topics%20covered

Topics Covered

security advisory DoS Ubuntu service disruption crash ncmpc

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  ncmpc                           0.24-1+deb8u1build0.16.04.1
  ncmpc-lyrics                    0.24-1+deb8u1build0.16.04.1

After a standard system update you need to restart ncmpc to make all the
necessary changes.

References

https://ubuntu.com/security/notices/USN-4507-1

CVE-2018-9240

Severity
critical
Lowest
Low
Medium
High
Critical

September 16, 2020

Topics%20covered

Topics Covered

security advisory DoS Ubuntu service disruption crash ncmpc

Package Information

https://launchpad.net/ubuntu/+source/ncmpc/0.24-1+deb8u1build0.16.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here