Stay Secure with the Latest Linux Advisories

security advisorydenial of servicelftp

Ubuntu 12.04 ESM USN-3731-2 Moderate lftp Denial Of Service

LFTP could be made to crash if it received specially crafted file.. =========================================================================Ubuntu Security Notice USN-3731-2 August 06, 2018 lftp vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 ESM Summary: LFTP could be made to crash if it received specially crafted file. Software Description: - lftp: Sophisticated command-line FTP/HTTP client programs Details: USN-3731-1 fixed a vulnerability in LFTP. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that LFTP incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM: lftp 4.3.3-1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3731-2 https://ubuntu.com/security/notices/USN-3731-1 CVE-2018-10916 . A vulnerability in LFTP identified in USN-3731-2 affecting Ubuntu 12.04 ESM poses risks of system crashes due to specially crafted input files.. LFTP Vulnerability, Ubuntu ESM, Denial Of Service, Security Notice, System Update. . LinuxSecurity.com Team

Aug 06, 2018 Ubuntu