Summary
USN-6429-1 fixed a vulnerability in curl. This update provides
the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS
and Ubuntu 18.04 LTS.
Original advisory details:
It was discovered that curl incorrectly handled cookies when an application
duplicated certain handles. A local attacker could possibly create a cookie
file and inject arbitrary cookies into subsequent connections.
(CVE-2023-38546)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | curl | 7.35.0-1ubuntu2.20+esm17 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | curl | 7.47.0-1ubuntu2.19+esm10 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | curl | 7.58.0-2ubuntu3.24+esm2 |
Vulnerabilities 1
-
Unscored —
This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of …
References
-
report
https://ubuntu.com/security/CVE-2023-38546