Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 18.04 LTS: USN-5983-1 Moderate: Nette Remote Code Execution

ubuntu
Calendar Grey March 29, 2023
Scroller Ubuntu
Critical Nette Framework flaw on Ubuntu systems may permit unauthorized code execution through specially crafted network packets. Ensure timely updates.
Nette could be made to run programs if it received specially crafted network traffic.

Summary

Nette could be made to run programs if it received specially crafted

network traffic.

Software Description:

- php-nette: Nette Framework

Details:

Cyku Hong discovered that Nette was not properly handling and validating

data used for code generation. A remote attacker could possibly use this

issue to execute arbitrary code.

Topics%20covered

Topics Covered

security advisory moderate remote code execution arbitrary code ubuntu php-nette

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
   php-nette                       2.4-20160731-1ubuntu0.1

Ubuntu 16.04 ESM:
   php-nette                       2.3.8-1ubuntu1+esm1

After a standard system update you need to restart any applications using
Nette to make all the necessary changes.

References

 

  CVE-2020-15227

March 29, 2023

Topics%20covered

Topics Covered

security advisory moderate remote code execution arbitrary code ubuntu php-nette

Package Information

https://launchpad.net/ubuntu/+source/php-nette/2.4-20160731-1ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.