Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 502
Alerts This Week
Warning Icon 1 502

Ubuntu 16.04 ESM USN-5666-1 Critical: Arbitrary Code Execution

ubuntu
Calendar Grey October 10, 2022
Dist Ubuntu Esm H88
Mitigating OpenSSH vulnerabilities on Ubuntu distributions necessitating fixes to prevent unauthorized code execution threats.
OpenSSH could be made to run arbitrary code if it some non-default configuration are in use.

Summary

OpenSSH could be made to run arbitrary code if it some

non-default configuration are in use.

Software Description:

- openssh: secure shell (SSH) for secure access to remote machines

Details:

It was discovered that OpenSSH incorrectly handled certain helper programs.

An attacker could possibly use this issue to arbitrary code execution.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
  openssh-server                  1:7.2p2-4ubuntu2.10+esm2

In general, a standard system update will make all the necessary changes.

References

CVE-2021-41617

Severity
critical
Lowest
Low
Medium
High
Critical

October 10, 2022

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.