Ubuntu Security Notice 5478-1 - Christian Moch and Michael Gruhn discovered that the libblkid library of util-linux did not properly manage memory under certain circumstances. A local attacker could possibly use this issue to cause denial of service by consuming all memory through a specially crafted MSDOS partition table.
5a54b6488a4e7a4756ee9c577a2f2d734c2a0ad86f68ecb35cba6166223e6d3b
==========================================================================
Ubuntu Security Notice USN-5478-1
June 14, 2022
util-linux vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 ESM
Summary:
A util-linux program could be made to crash if it opened a specially
crafted file system.
Software Description:
- util-linux: miscellaneous system utilities
Details:
Christian Moch and Michael Gruhn discovered that the libblkid library
of util-linux did not properly manage memory under certain
circumstances. A local attacker could possibly use this issue to cause
denial of service by consuming all memory through
a specially crafted MSDOS partition table.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 ESM:
libblkid1 2.27.1-6ubuntu3.10+esm2
util-linux 2.27.1-6ubuntu3.10+esm2
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5478-1
CVE-2016-5011