Skip to content
OpenAdvisories
High USN-6942-1 1 CVE

gross vulnerability

Published Aug 1, 2024 · Updated Jun 25, 2026

Summary

It was discovered that Gross incorrectly handled memory when composing log
entries. An attacker could possibly use this issue to cause Gross to crash,
resulting in a denial of service, or possibly execute arbitrary code.

Fixed packages 5

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS gross 1.0.2-4ubuntu0.20.04.1
Ubuntu · 22.04 LTS 22.04:LTS gross 1.0.2-4ubuntu0.22.04.1
Ubuntu · 24.04 LTS 24.04:LTS gross 1.0.2-4ubuntu0.24.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS gross 1.0.2-4ubuntu0.16.04.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS gross 1.0.2-4ubuntu0.18.04.1~esm1

Vulnerabilities 1

  • High 7.5

    A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger …

References

  • report
    https://ubuntu.com/security/CVE-2023-52159