Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Ubuntu 20.04 LTS USN-6629-3: ujson Critical Denial of Service Warning

ubuntu
Calendar Grey February 15, 2024
Dist Ubuntu Esm H88
The patched issues within libxml2 in Ubuntu 20.04 LTS highlighted in USN-6629-3 greatly enhance system security.
Several security issues were fixed in UltraJSON.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS (Available with Ubuntu Pro) Summary: Several security issues were fixed in UltraJSON. Software Description: - ujson: ultra fast JSON encoder and decoder for Python 3 Details: USN-6629-1 fixed vulnerabilities in UltraJSON. This update provides the corresponding updates for Ubuntu 20.04 LTS. Original advisory details: It was discovered that UltraJSON incorrectly handled certain input with a large amount of indentation. An attacker could possibly use this issue to crash the program, resulting in a denial of service. (CVE-2021-45958) Jake Miller discovered that UltraJSON incorrectly decoded certain characters. An attacker could possibly use this issue to cause key confusion and overwrite values in dictionaries. (CVE-2022-31116) It was discovered that UltraJSON incorrectly handled an error when reallocating a buffer for string decoding. An a...

Read the Full Advisory

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS (Available with Ubuntu Pro): python3-ujson 1.35-4ubuntu0.1+esm1 In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6629-3

https://ubuntu.com/security/notices/USN-6629-1

CVE-2022-31116, CVE-2022-31117

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6629-3

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here