USN-7370-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-7370-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7370-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-7370-1

Related

Published

2025-03-25T02:06:39.092968Z

Modified

2025-03-25T02:06:39.092968Z

Summary

smartdns vulnerabilities

Details

It was discovered that SmartDNS did not correctly align certain objects in memory, leading to undefined behaviour. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2024-24198, CVE-2024-24199)

It was discovered that SmartDNS did not correctly handle certain inputs, which could lead to an integer overflow. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2024-42643)

References

Affected packages

Ubuntu:Pro:22.04:LTS / smartdns

Package

Name: smartdns
Purl: pkg:deb/ubuntu/smartdns@35+dfsg-1ubuntu0.1~esm1?arch=source&distro=esm-apps/jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

35+dfsg-1ubuntu0.1~esm1

Affected versions

33+dfsg-2.*

33+dfsg-2.1

33+dfsg-2.1build1

Other

35+dfsg-1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "35+dfsg-1ubuntu0.1~esm1",
            "binary_name": "smartdns"
        },
        {
            "binary_version": "35+dfsg-1ubuntu0.1~esm1",
            "binary_name": "smartdns-dbgsym"
        }
    ]
}

Ubuntu:24.10 / smartdns

Package

Name: smartdns
Purl: pkg:deb/ubuntu/smartdns@46+dfsg-1ubuntu0.1?arch=source&distro=oracular

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

46+dfsg-1ubuntu0.1

Affected versions

Other

45+dfsg-1build2

46+dfsg-1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "46+dfsg-1ubuntu0.1",
            "binary_name": "smartdns"
        },
        {
            "binary_version": "46+dfsg-1ubuntu0.1",
            "binary_name": "smartdns-dbgsym"
        }
    ]
}

Ubuntu:Pro:24.04:LTS / smartdns

Package

Name: smartdns
Purl: pkg:deb/ubuntu/smartdns@45+dfsg-1ubuntu0.1~esm1?arch=source&distro=esm-apps/noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

45+dfsg-1ubuntu0.1~esm1

Affected versions

Other

42+dfsg-1

43+dfsg-1

45+dfsg-1

45+dfsg-1build1

45+dfsg-1build2

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_version": "45+dfsg-1ubuntu0.1~esm1",
            "binary_name": "smartdns"
        },
        {
            "binary_version": "45+dfsg-1ubuntu0.1~esm1",
            "binary_name": "smartdns-dbgsym"
        }
    ]
}