Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Ubuntu 16.04 ESM USN-5666-1 Critical: Arbitrary Code Execution

Ubuntu Large Esm H500
OpenSSH could be made to run arbitrary code if it some non-default configuration are in use.
=========================================================================Ubuntu Security Notice USN-5666-1
October 10, 2022

openssh vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 ESM

Summary:

OpenSSH could be made to run arbitrary code if it some
non-default configuration are in use.

Software Description:
- openssh: secure shell (SSH) for secure access to remote machines

Details:

It was discovered that OpenSSH incorrectly handled certain helper programs.
An attacker could possibly use this issue to arbitrary code execution.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
  openssh-server                  1:7.2p2-4ubuntu2.10+esm2

In general, a standard system update will make all the necessary changes.

References:
  
  CVE-2021-41617

Ubuntu 16.04 ESM USN-5666-1 Critical: Arbitrary Code Execution

ubuntu
Calendar Grey October 10, 2022
Dist Ubuntu Esm H88
Mitigating OpenSSH vulnerabilities on Ubuntu distributions necessitating fixes to prevent unauthorized code execution threats.
OpenSSH could be made to run arbitrary code if it some non-default configuration are in use.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: openssh-server 1:7.2p2-4ubuntu2.10+esm2 In general, a standard system update will make all the necessary changes.

References

CVE-2021-41617

Severity
critical
Lowest
Low
Medium
High
Critical

October 10, 2022

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here