Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Ubuntu 16.04 LTS USN-4523-1 Critical: LibOFX Denial Of Service

ubuntu
Calendar Grey September 21, 2020
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-4523-2 informs about a vulnerability in libofx that could lead to a denial of service stemming from a NULL pointer dereferencing issue.
LibOFX could be made to crash.

Summary

LibOFX could be made to crash.

Software Description:

- libofx: client-side implementation of Open Financial Exchange

specification

Details:

It was discovered that LibOFX did not properly check for errors in

certain situations, leading to a NULL pointer dereference. A remote

attacker could use this issue to cause a denial of service attack.

(CVE-2019-9656)

Topics%20covered

Topics Covered

security advisory denial of service remote exploit Ubuntu libofx

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  libofx-dev                      1:0.9.10-1+deb8u2build0.16.04.1
  libofx6                         1:0.9.10-1+deb8u2build0.16.04.1
  ofx                             1:0.9.10-1+deb8u2build0.16.04.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4523-1

CVE-2019-9656

Severity
critical
Lowest
Low
Medium
High
Critical

September 21, 2020

Topics%20covered

Topics Covered

security advisory denial of service remote exploit Ubuntu libofx

Package Information

https://launchpad.net/ubuntu/+source/libofx/1:0.9.10-1+deb8u2build0.16.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here