Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Ubuntu 16.04 ESM Advisory USN-5593-1 Moderate: libzstd Code Exec Risk

ubuntu
Calendar Grey September 2, 2022
Dist Ubuntu Esm H88
A vulnerability in Zstandard may enable arbitrary code execution with specially formed inputs, affecting various Ubuntu versions. Refer to the provided update guidelines.
Zstandard could be made to execute arbitrary code if it received specially crafted input.

Summary

Zstandard could be made to execute arbitrary code if it received specially

crafted input.

Software Description:

- libzstd: fast lossless compression algorithm

Details:

It was discovered that Zstandard incorrectly handled certain inputs.

An attacker could possibly use this issue to execute arbitrary code.

Topics%20covered

Topics Covered

security advisory code execution moderate threat ubuntu arbitrary execution libzstd

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
  libzstd1                        1.3.1+dfsg-1~ubuntu0.16.04.1+esm2
  zstd                            1.3.1+dfsg-1~ubuntu0.16.04.1+esm2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5593-1

CVE-2019-11922

September 01, 2022

Topics%20covered

Topics Covered

security advisory code execution moderate threat ubuntu arbitrary execution libzstd

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.