Stay Secure with the Latest Linux Advisories

security advisoryDoSUbuntu

Ubuntu 16.04 LTS: USN-4507-1 Critical Security Advisory for ncmpc

ncmpc could be made to crash if it received a long chat message.. =========================================================================Ubuntu Security Notice USN-4507-1 September 16, 2020 ncmpc vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: ncmpc could be made to crash if it received a long chat message. Software Description: - ncmpc: ncurses-based audio player Details: It was discovered that ncmpc incorrectly handled long chat messages. A remote attacker could possibly exploit this with a crafted chat message, causing ncmpc to crash, resulting in a denial of service. (CVE-2018-9240) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: ncmpc 0.24-1+deb8u1build0.16.04.1 ncmpc-lyrics 0.24-1+deb8u1build0.16.04.1 After a standard system update you need to restart ncmpc to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4507-1 CVE-2018-9240 Package Information: https://launchpad.net/ubuntu/+source/ncmpc/0.24-1+deb8u1build0.16.04.1 . Ubuntu Security Advisory USN-4508-1 tackles the vulnerability in ncmpc leading to potential crashes caused by excessively long playlist names.. ncmpc Crash, Denial Of Service, Ubuntu Advisory, Security Notice, September 2020. . Severity: Critical. LinuxSecurity.com Team

Sep 16, 2020 •Critical Ubuntu