USN-6209-1
Dashboard / Vulnerabilities / USN-6209-1
USN-6209-1
Summary: Gerbv vulnerabilities
Details: Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber files. An attacker could possibly use this issue to crash Gerbv (resulting in a denial of service), or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-40391, CVE-2021-40394) Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber files. An attacker could possibly use this issue to disclose information, crash Gerbv (resulting in a denial of service), or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-40393) Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber files. An attacker could possibly use this issue to disclose information. (CVE-2021-40400, CVE-2021-40403) Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber files. An attacker could possibly use this issue to disclose information, crash Gerbv (resulting in a denial of service), or execute arbitrary code. (CVE-2021-40401)
References: https://ubuntu.com/security/notices/USN-6209-1, https://ubuntu.com/security/CVE-2021-40391, https://ubuntu.com/security/CVE-2021-40393, https://ubuntu.com/security/CVE-2021-40394, https://ubuntu.com/security/CVE-2021-40400, https://ubuntu.com/security/CVE-2021-40401, https://ubuntu.com/security/CVE-2021-40403
Affected packages
Package
Name: gerbv
Purl: pkg:deb/ubuntu/gerbv?arch=source&distro=trusty%2Fesm
Affected ranges
Type: ECOSYSTEM
Events:
