Summary
It was discovered that Augeas incorrectly handled certain strings.
An attacker could use this issue to cause Augeas to crash, leading
to a denial of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | augeas | 1.2.0-0ubuntu1.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | augeas | 1.4.0-0ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of esca…
References
-
report
https://ubuntu.com/security/CVE-2017-7555