Ubuntu 4919-1: OpenSLP vulnerability | LinuxSecurity.com

Advisories

==========================================================================
Ubuntu Security Notice USN-4919-1
April 19, 2021

openslp-dfsg vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS
- Ubuntu 14.04 ESM

Summary:

OpenSLP could be made to crash or run programs as your login if it received
specially crafted network traffic.

Software Description:
- openslp-dfsg: Service Location Protocol library

Details:

It was discovered that OpenSLP did not properly validate URLs. A remote
attacker could use this issue to cause OpenSLP to crash or possibly execute
arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  libslp1                         1.2.1-11ubuntu0.16.04.2

Ubuntu 14.04 ESM:
  libslp1                         1.2.1-9ubuntu0.3+esm1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-4919-1
  CVE-2019-5544

Package Information:
  https://launchpad.net/ubuntu/+source/openslp-dfsg/1.2.1-11ubuntu0.16.04.2


Ubuntu 4919-1: OpenSLP vulnerability

April 19, 2021

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS - Ubuntu 14.04 ESM Summary: OpenSLP could be made to crash or run programs as your login if it received specially crafted network traffic. Software Description: - openslp-dfsg: Service Location Protocol library Details: It was discovered that OpenSLP did not properly validate URLs. A remote attacker could use this issue to cause OpenSLP to crash or possibly execute arbitrary code.

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS:   libslp1                         1.2.1-11ubuntu0.16.04.2 Ubuntu 14.04 ESM:   libslp1                         1.2.1-9ubuntu0.3+esm1 In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-4919-1

  CVE-2019-5544

Severity
Ubuntu Security Notice USN-4919-1

Package Information

  https://launchpad.net/ubuntu/+source/openslp-dfsg/1.2.1-11ubuntu0.16.04.2

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.