Low
Canonical Ubuntu
It was discovered that FLAC was not properly performing memory management operations, which could result in a memory leak. An attacker could possibly use this issue to cause FLAC to consume resources, leading to a denial of service. (CVE-2017-6888) It was discovered that FLAC was not properly performing bounds checking operations when encoding or decoding data. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to expose sensitive information or to cause FLAC to crash, leading to a denial of service. (CVE-2020-0499, CVE-2021-0561) Update Instructions: Run sudo pro fix USN-5733-1
to fix the vulnerability. The problem can be corrected by updating your system to the following package versions: libflac-doc β 1.3.1-4ubuntu0.1~esm1 libflac-dev β 1.3.1-4ubuntu0.1~esm1 libflac+Β±dev β 1.3.1-4ubuntu0.1~esm1 flac β 1.3.1-4ubuntu0.1~esm1 libflac++6v5 β 1.3.1-4ubuntu0.1~esm1 libflac8 β 1.3.1-4ubuntu0.1~esm1 Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro
CVEs contained in this USN include: CVE-2017-6888, CVE-2020-0499, CVE-2021-0561.
Severity is low unless otherwise noted.
Users of affected products are strongly encouraged to follow the mitigations below. The Cloud Foundry project recommends upgrading the following releases:
2022-12-07: Initial vulnerability report published.
CPE | Name | Operator | Version |
---|---|---|---|
cflinuxfs3 | lt | 0.337.0 | |
cf deployment | lt | 23.3.0 |