USN-6942-1

See a problem?

Source

https://ubuntu.com/security/notices/USN-6942-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-6942-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-6942-1

Related

CVE-2023-52159

Published

2024-08-01T14:27:25.615949Z

Modified

2024-08-01T14:27:25.615949Z

Summary

gross vulnerability

Details

It was discovered that Gross incorrectly handled memory when composing log entries. An attacker could possibly use this issue to cause Gross to crash, resulting in a denial of service, or possibly execute arbitrary code.

References

Affected packages

Ubuntu:Pro:16.04:LTS / gross

Package

Name: gross
Purl: pkg:deb/ubuntu/gross@1.0.2-4ubuntu0.16.04.1~esm1?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.2-4ubuntu0.16.04.1~esm1

Affected versions

1.*

1.0.2-4

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "gross": "1.0.2-4ubuntu0.16.04.1~esm1",
            "gross-dbgsym": "1.0.2-4ubuntu0.16.04.1~esm1"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / gross

Package

Name: gross
Purl: pkg:deb/ubuntu/gross@1.0.2-4ubuntu0.18.04.1~esm1?arch=src?distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.2-4ubuntu0.18.04.1~esm1

Affected versions

1.*

1.0.2-4

1.0.2-4build1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "gross": "1.0.2-4ubuntu0.18.04.1~esm1",
            "gross-dbgsym": "1.0.2-4ubuntu0.18.04.1~esm1"
        }
    ]
}

Ubuntu:20.04:LTS / gross

Package

Name: gross
Purl: pkg:deb/ubuntu/gross@1.0.2-4ubuntu0.20.04.1?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.2-4ubuntu0.20.04.1

Affected versions

1.*

1.0.2-4build1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "gross": "1.0.2-4ubuntu0.20.04.1",
            "gross-dbgsym": "1.0.2-4ubuntu0.20.04.1"
        }
    ]
}

Ubuntu:22.04:LTS / gross

Package

Name: gross
Purl: pkg:deb/ubuntu/gross@1.0.2-4ubuntu0.22.04.1?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.2-4ubuntu0.22.04.1

Affected versions

1.*

1.0.2-4build1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "gross": "1.0.2-4ubuntu0.22.04.1",
            "gross-dbgsym": "1.0.2-4ubuntu0.22.04.1"
        }
    ]
}

Ubuntu:24.04:LTS / gross

Package

Name: gross
Purl: pkg:deb/ubuntu/gross@1.0.2-4ubuntu0.24.04.1?arch=src?distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.2-4ubuntu0.24.04.1

Affected versions

1.*

1.0.2-4build1

1.0.2-4build2

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "gross": "1.0.2-4ubuntu0.24.04.1",
            "gross-dbgsym": "1.0.2-4ubuntu0.24.04.1"
        }
    ]
}