Test ID:	1.3.6.1.4.1.25623.1.0.844299
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-4243-1)
Summary:	The remote host is missing an update for the 'libbsd' package(s) announced via the USN-4243-1 advisory.
Description:	Summary: The remote host is missing an update for the 'libbsd' package(s) announced via the USN-4243-1 advisory. Vulnerability Insight: It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 ESM. (CVE-2016-2090) It was discovered that libbsd incorrectly handled certain strings. An attacker could possibly use this issue to access sensitive information. (CVE-2019-20367) Affected Software/OS: 'libbsd' package(s) on Ubuntu 12.04, Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 19.04. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2090 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DIQKQ42Z7553D46QY3IMIQKS52QTNIHY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7KJE5SPSX7HEKLZ34LUTZLXWPEL2K353/ https://security.gentoo.org/glsa/201607-13 https://blog.fuzzing-project.org/36-Heap-buffer-overflow-in-fgetwln-function-of-libbsd.html https://lists.debian.org/debian-lts-announce/2019/12/msg00036.html http://www.openwall.com/lists/oss-security/2016/01/28/5 https://usn.ubuntu.com/4243-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-20367 https://gitlab.freedesktop.org/libbsd/libbsd/commit/9d917aad37778a9f4a96ba358415f077f3f36f3b https://lists.freedesktop.org/archives/libbsd/2019-August/000229.html https://lists.debian.org/debian-lts-announce/2021/02/msg00027.html https://lists.apache.org/thread.html/ra781e51cf1ec40381c98cddc073b3576fb56c3978f4564d2fa431550@%3Cdev.tomee.apache.org%3E https://lists.apache.org/thread.html/r0e913668380f59bcbd14fdd8ae8d24f95f99995e290cd18a7822c6e5@%3Cdev.tomee.apache.org%3E SuSE Security Announcement: openSUSE-SU-2020:0679 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00043.html
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.