Tuesday, May 27, 2025

[USN-7537-1] net-tools vulnerability

==========================================================================
Ubuntu Security Notice USN-7537-1
May 27, 2025

net-tools vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.04
- Ubuntu 24.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

net-tools could be made to crash or run programs as your login if it
opened a specially crafted input.

Software Description:
- net-tools: NET-3 networking toolkit

Details:

It was discovered that net-tools incorrectly handled certain inputs.
An attacker could possible use this issue to cause a crash or execute
arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.04
net-tools 2.10-1.1ubuntu1.25.04.1

Ubuntu 24.10
net-tools 2.10-1.1ubuntu1.24.10.1

Ubuntu 24.04 LTS
net-tools 2.10-0.1ubuntu4.1

Ubuntu 22.04 LTS
net-tools 1.60+git20181103.0eebece-1ubuntu5.1

Ubuntu 20.04 LTS
net-tools 1.60+git20180626.aebd88e-1ubuntu1.1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-7537-1
CVE-2025-46836

Package Information:
https://launchpad.net/ubuntu/+source/net-tools/2.10-1.1ubuntu1.25.04.1
https://launchpad.net/ubuntu/+source/net-tools/2.10-1.1ubuntu1.24.10.1
https://launchpad.net/ubuntu/+source/net-tools/2.10-0.1ubuntu4.1
https://launchpad.net/ubuntu/+source/net-tools/1.60+git20181103.0eebece-1ubuntu5.1
https://launchpad.net/ubuntu/+source/net-tools/1.60+git20180626.aebd88e-1ubuntu1.1

No comments:

Post a Comment