Summary
It was discovered that Inetutils did not properly check the response of
ftp requests. A remote attacker could use this vulnerability to cause a crash
or run programs in the user machine.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | inetutils | 2:1.9.2-1ubuntu0.1~esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | inetutils | 2:1.9.4-1ubuntu0.1~esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | inetutils | 2:1.9.4-3ubuntu0.1+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | inetutils | 2:1.9.4-11ubuntu0.1+esm1 |
Vulnerabilities 1
-
Unscored —
The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure the…
References
-
report
https://ubuntu.com/security/CVE-2021-40491