Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 516
Alerts This Week
Warning Icon 1 516

Ubuntu 20.04 LTS USN-6121-1 Moderate: Nanopb DoS and Code Issues

ubuntu
Calendar Grey May 30, 2023
Dist Ubuntu Esm H88
Multiple vulnerabilities in Nanopb resolved via Ubuntu Security Notice USN-6121-1 mitigating code execution and denial-of-service threats.
Several security issues were fixed in Nanopb.

Summary

Several security issues were fixed in Nanopb.

Software Description:

- nanopb: Protocol Buffers with small code size

Details:

It was discovered that Nanopb incorrectly handled certain decode messages.

An attacker could possibly use this cause a denial of service or expose

sensitive information. (CVE-2020-26243)

It was discovered that Nanopb incorrectly handled certain decode messages.

An attacker could possibly use this issue to cause a denial of service

or execute arbitrary code. (CVE-2021-21401)

Topics%20covered

Topics Covered

security advisory Ubuntu moderate severity DoS threat code execution risk Nanopb

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS (Available with Ubuntu Pro):
  nanopb                          0.4.1-1ubuntu0.1~esm1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6121-1

CVE-2020-26243, CVE-2021-21401

May 30, 2023

Topics%20covered

Topics Covered

security advisory Ubuntu moderate severity DoS threat code execution risk Nanopb

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.