Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 22.04 ESM USN-6008-1 Moderate Exo Arbitrary Code Execution

ubuntu
Calendar Grey April 12, 2023
Scroller Ubuntu
Deploy immediate patches to mitigate Exo vulnerability on Ubuntu versions 14.04 through 22.04 ESM, effectively reducing the risk of system crashes and unauthorized code execution.
Exo could be made to crash or run programs if it opened a specially crafted file.

Summary

Exo could be made to crash or run programs if it opened a specially crafted

file.

Software Description:

- exo: Extension library used in the Xfce desktop

Details:

It was discovered that Exo did not properly sanitized desktop files.

A remote attacker could possibly use this issue to to cause a crash or

arbitrary code execution.

Topics%20covered

Topics Covered

security advisory Ubuntu moderate threat arbitrary execution executable code

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 ESM:
  libexo-2-0                      4.16.3-1ubuntu0.1~esm1
  libexo-common                   4.16.3-1ubuntu0.1~esm1

Ubuntu 20.04 ESM:
  libexo-1-0                      0.12.11-1ubuntu1.20.04.1+esm1
  libexo-2-0                      0.12.11-1ubuntu1.20.04.1+esm1
  libexo-common                   0.12.11-1ubuntu1.20.04.1+esm1

Ubuntu 18.04 ESM:
  libexo-1-0                      0.12.2-0ubuntu0.18.04.1+esm1
  libexo-2-0                      0.12.2-0ubuntu0.18.04.1+esm1
  libexo-common                   0.12.2-0ubuntu0.18.04.1+esm1

Ubuntu 16.04 ESM:
  libexo-1-0                      0.10.7-1ubuntu0.1~esm1
  libexo-common                   0.10.7-1ubuntu0.1~esm1

Ubuntu 14.04 ESM:
  libexo-1-0                      0.10.2-3ubuntu1.14.04.2+esm1
  libexo-common                   0.10.2-3ubuntu1.14.04.2+esm1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6008-1

CVE-2022-32278

Severity
important
Lowest
Low
Medium
High
Critical

April 11, 2023

Topics%20covered

Topics Covered

security advisory Ubuntu moderate threat arbitrary execution executable code

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.