Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Ubuntu 16.04 ESM: USN-5750-1 Critical GnuTLS Denial Of Service

Ubuntu Large Esm H500
GnuTLS could be made to crash if it received specially crafted network traffic from an authenticated client.
=========================================================================Ubuntu Security Notice USN-5750-1
November 30, 2022

gnutls28 vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 ESM

Summary:

GnuTLS could be made to crash if it received specially crafted network
traffic from an authenticated client.

Software Description:
- gnutls28: GNU TLS library

Details:

It was discovered that GnuTLS incorrectly handled certain memory
operations. A remote attacker could possibly use this issue to cause GnuTLS
to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
  libgnutls30                     3.4.10-4ubuntu1.9+esm1

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-5750-1
  CVE-2021-4209

Ubuntu 16.04 ESM: USN-5750-1 Critical GnuTLS Denial Of Service

ubuntu
Calendar Grey November 30, 2022
Dist Ubuntu Esm H88
A discovered security flaw in GnuTLS may lead to service interruption due to specially designed network packets in Ubuntu 16.04 ESM.
GnuTLS could be made to crash if it received specially crafted network traffic from an authenticated client.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: libgnutls30 3.4.10-4ubuntu1.9+esm1 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5750-1

CVE-2021-4209

Severity
critical
Lowest
Low
Medium
High
Critical

November 30, 2022

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here