Summary
It was discovered that libbsd incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 14.04 ESM. (CVE-2016-2090)
It was discovered that libbsd incorrectly handled certain strings.
An attacker could possibly use this issue to access sensitive information.
(CVE-2019-20367)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libbsd | 0.8.2-1ubuntu0.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | libbsd | 0.8.7-1ubuntu0.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libbsd | 0.6.0-2ubuntu1+esm1 |
Vulnerabilities 2
-
Unscored —
Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via…
-
Unscored —
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (…