Lucene search

UbuntuUSN-5838-1

HistoryFeb 01, 2023 - 12:00 a.m.

AdvanceCOMP vulnerabilities

2023-02-0100:00:00

ubuntu.com

ubuntu 22.10

ubuntu 22.04 lts

ubuntu 20.04 lts

ubuntu 18.04 esm

ubuntu 16.04 esm

advancecomp

memory management

mng file

remote attack

denial of service

zip file

cve-2022-35014

cve-2022-35017

cve-2022-35018

cve-2022-35019

cve-2022-35020

cve-2022-35015

cve-2022-35016

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.5%

JSON

Releases

Ubuntu 22.10
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM

Packages

advancecomp - collection of recompression utilities

Details

It was discovered that AdvanceCOMP did not properly manage memory while
performing read operations on MNG file. If a user were tricked into opening
a specially crafted MNG file, a remote attacker could possibly use this
issue to cause AdvanceCOMP to crash, resulting in a denial of service.
(CVE-2022-35014, CVE-2022-35017, CVE-2022-35018, CVE-2022-35019,
CVE-2022-35020)

It was discovered that AdvanceCOMP did not properly manage memory while
performing read operations on ZIP file. If a user were tricked into opening
a specially crafted ZIP file, a remote attacker could possibly use this
issue to cause AdvanceCOMP to crash, resulting in a denial of service.
(CVE-2022-35015, CVE-2022-35016)

OSVersionArchitecturePackageVersionFilename
Ubuntu22.10noarchadvancecomp< 2.3-1ubuntu0.22.10.1UNKNOWN
Ubuntu22.10noarchadvancecomp-dbgsym< 2.3-1ubuntu0.22.10.1UNKNOWN
Ubuntu22.04noarchadvancecomp< 2.1-2.1ubuntu2.1UNKNOWN
Ubuntu22.04noarchadvancecomp-dbgsym< 2.1-2.1ubuntu2.1UNKNOWN
Ubuntu20.04noarchadvancecomp< 2.1-2.1ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchadvancecomp-dbgsym< 2.1-2.1ubuntu0.20.04.1UNKNOWN
Ubuntu18.04noarchadvancecomp< 2.1-1ubuntu0.18.04.3UNKNOWN
Ubuntu18.04noarchadvancecomp-dbgsym< 2.1-1ubuntu0.18.04.3UNKNOWN
Ubuntu16.04noarchadvancecomp< 1.20-1ubuntu0.2+esm2UNKNOWN
Ubuntu16.04noarchadvancecomp< 1.20-1ubuntu0.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	22.10	noarch	advancecomp	< 2.3-1ubuntu0.22.10.1	UNKNOWN
Ubuntu	22.10	noarch	advancecomp-dbgsym	< 2.3-1ubuntu0.22.10.1	UNKNOWN
Ubuntu	22.04	noarch	advancecomp	< 2.1-2.1ubuntu2.1	UNKNOWN
Ubuntu	22.04	noarch	advancecomp-dbgsym	< 2.1-2.1ubuntu2.1	UNKNOWN
Ubuntu	20.04	noarch	advancecomp	< 2.1-2.1ubuntu0.20.04.1	UNKNOWN
Ubuntu	20.04	noarch	advancecomp-dbgsym	< 2.1-2.1ubuntu0.20.04.1	UNKNOWN
Ubuntu	18.04	noarch	advancecomp	< 2.1-1ubuntu0.18.04.3	UNKNOWN
Ubuntu	18.04	noarch	advancecomp-dbgsym	< 2.1-1ubuntu0.18.04.3	UNKNOWN
Ubuntu	16.04	noarch	advancecomp	< 1.20-1ubuntu0.2+esm2	UNKNOWN
Ubuntu	16.04	noarch	advancecomp	< 1.20-1ubuntu0.2	UNKNOWN