Stay Secure with the Latest Linux Advisories

security advisoryDoSUbuntu

Ubuntu 22.10: USN-6036-1 Critical Issue with Patchelf DoS Vulnerability

patchelf could be made to crash or read sensitive data if it opened a specially crafted file.. ========================================================================= Ubuntu Security Notice USN-6036-1 April 20, 2023 patchelf vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.10 - Ubuntu 22.04 ESM Summary: patchelf could be made to crash or read sensitive data if it opened a specially crafted file. Software Description: - patchelf: modify properties of ELF executables Details: It was discovered that PatchELF was not properly performing bounds checks, which could lead to an out-of-bounds read via a specially crafted file. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. (CVE-2022-44940) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.10: patchelf 0.14.3-1ubuntu0.1 Ubuntu 22.04 ESM: patchelf 0.14.3-1ubuntu0.1~esm1 In general, a standard system update will make all the necessary changes. References: CVE-2022-44940 Package Information: https://launchpad.net/ubuntu/+source/patchelf/0.14.3-1ubuntu0.1 . Revise your Ubuntu installation to address the patchelf vulnerability that may lead to system failures or the leak of confidential information.. Patchelf Vulnerability, Ubuntu Security Notice, Out-of-Bounds Read. . Severity: Critical. LinuxSecurity.com Team

Apr 20, 2023 •Critical Ubuntu