Alerts This Week
Warning Icon 1 1,295
Alerts This Week
Warning Icon 1 1,295

Ubuntu 24.10, USN-7227-1 critical: PCL denial of service risk

ubuntu
Calendar Grey January 24, 2025
Dist Ubuntu Esm H88
Important patch released for Ubuntu tackling vulnerabilities in PCL that might expose the system to potential security threats via manipulated input flaws.
PCL could be made to crash if it received specially crafted input.

Summary

PCL could be made to crash if it received specially crafted input.

Software Description:

- pcl: Point Cloud Library for 2D/3D image and point cloud processing

Details:

It was discovered that PCL incorrectly handled certain malformed files.

If a user or automated system were tricked into opening a specially crafted

file, an attacker could possibly exploit this to cause a denial of service.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   libpcl-io1.14                   1.14.0+dfsg-3ubuntu0.2
   libpcl-recognition1.14          1.14.0+dfsg-3ubuntu0.2
   libpcl-visualization1.14        1.14.0+dfsg-3ubuntu0.2
   pcl-tools                       1.14.0+dfsg-3ubuntu0.2

Ubuntu 24.04 LTS
   libpcl-io1.14                   1.14.0+dfsg-1ubuntu0.1~esm1
                                   Available with Ubuntu Pro
   libpcl-recognition1.14          1.14.0+dfsg-1ubuntu0.1~esm1
                                   Available with Ubuntu Pro
   libpcl-visualization1.14        1.14.0+dfsg-1ubuntu0.1~esm1
                                   Available with Ubuntu Pro
   pcl-tools                       1.14.0+dfsg-1ubuntu0.1~esm1
                                   Available with Ubuntu Pro

Ubuntu 22.04 LTS
   libpcl-io1.12                   1.12.1+dfsg-3ubuntu0.1~esm2
                                   Available with Ubuntu Pro
   libpcl-recognition1.12          1.12.1+dfsg-3ubuntu0.1~esm2
                                   Available with Ubuntu Pro
   libpcl-visualization1.12        1.12.1+dfsg-3ubuntu0.1~esm2
                                   Available with Ubuntu Pro
   pcl-tools                       1.12.1+dfsg-3ubuntu0.1~esm2
                                   Available with Ubuntu Pro

Ubuntu 20.04 LTS
   libpcl-io1.10                   1.10.0+dfsg-5ubuntu1+esm2
                                   Available with Ubuntu Pro
   libpcl-recognition1.10          1.10.0+dfsg-5ubuntu1+esm2
                                   Available with Ubuntu Pro
   libpcl-visualization1.10        1.10.0+dfsg-5ubuntu1+esm2
                                   Available with Ubuntu Pro
   pcl-tools                       1.10.0+dfsg-5ubuntu1+esm2
                                   Available with Ubuntu Pro

Ubuntu 18.04 LTS
   libpcl-io1.8                    1.8.1+dfsg1-2ubuntu2.18.04.1+esm1
                                   Available with Ubuntu Pro
   libpcl-recognition1.8           1.8.1+dfsg1-2ubuntu2.18.04.1+esm1
                                   Available with Ubuntu Pro
   libpcl-visualization1.8         1.8.1+dfsg1-2ubuntu2.18.04.1+esm1
                                   Available with Ubuntu Pro
   pcl-tools                       1.8.1+dfsg1-2ubuntu2.18.04.1+esm1
                                   Available with Ubuntu Pro

Ubuntu 16.04 LTS
   libpcl-io1.7                    1.7.2-14ubuntu0.1+esm1
                                   Available with Ubuntu Pro
   libpcl-recognition1.7           1.7.2-14ubuntu0.1+esm1
                                   Available with Ubuntu Pro
   libpcl-visualization1.7         1.7.2-14ubuntu0.1+esm1
                                   Available with Ubuntu Pro
   pcl-tools                       1.7.2-14ubuntu0.1+esm1
                                   Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7227-1

CVE-2024-53432

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7227-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here