[월:] 2021년 01월

USN-4687-1: Firefox vulnerability A use-after-free was discovered in Firefox when handling SCTP packets. An attacker could potentially exploit this to cause a denial of service, or execute arbitrary code. Source: USN-4687-1: Firefox vulnerability

USN-4686-1: Ghostscript vulnerabilities It was discovered that Ghostscript incorrectly handled certain image files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. Source: USN-4686-1: Ghostscript vulnerabilities

USN-4685-1: OpenJPEG vulnerabilities It was discovered that OpenJPEG incorrectly handled certain image data. An attacker could use this issue to cause OpenJPEG to crash, leading to a denial of service, or possibly execute arbitrary code. Source: USN-4685-1: OpenJPEG vulnerabilities

USN-4684-1: EDK II vulnerabilities Laszlo Ersek discovered that EDK II incorrectly validated certain signed images. An attacker could possibly use this issue with a specially crafted image to cause EDK II to hang, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2019-14562) It was discovered that EDK II incorrectly parsed signed PKCS #7 data. An attacker could use this issue to cause EDK II to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2019-14584) Source: USN-4684-1: EDK II vulnerabilities

USN-4683-1: Linux kernel (OEM) vulnerability Minh Yuan discovered that the framebuffer console driver in the Linux kernel did not properly handle fonts in some conditions. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). Source: USN-4683-1: Linux kernel (OEM) vulnerability