Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Ubuntu 22.04 LTS USN-6970-1 Critical: exfatprogs Denial of Service

ubuntu
Calendar Grey August 20, 2024
Dist Ubuntu Esm H88
Essential security patch for Ubuntu related to exfatprogs addresses a significant vulnerability resulting in system crashes and potential code execution threats.
exfatprogs could be made to crash or run programs if it handled a specially crafted partition.

Summary

exfatprogs could be made to crash or run programs if it handled a specially

crafted partition.

Software Description:

- exfatprogs: tools to create, check and label exFAT filesystems

Details:

It was discovered that exfatprogs incorrectly handled certain memory

operations. If a user or automated system were tricked into handling

specially crafted exfat partitions, a remote attacker could use this issue

to cause exfatprogs to crash, resulting in a denial of service, or possibly

execute arbitrary code.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
   exfatprogs                      1.1.3-1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6970-1

CVE-2023-45897

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6970-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here