1. Ubuntu Security Notices
  2. USN-6518-1

USN-6518-1: AFFLIB vulnerability

Publication date

28 November 2023

Overview

AFFLIB could be made to crash if it opened a specially crafted file.

Releases

Packages

  • afflib - Advanced Forensics Format Library

Details

Luis Rocha discovered that AFFLIB incorrectly handled certain input files.
If a user or automated system were tricked into processing a specially
crafted AFF image file, a remote attacker could possibly use this issue
to cause a denial of service via application crash. (CVE-2018-8050)

Luis Rocha discovered that AFFLIB incorrectly handled certain input files.
If a user or automated system were tricked into processing a specially
crafted AFF image file, a remote attacker could possibly use this issue
to cause a denial of service via application crash. (CVE-2018-8050)

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
18.04 bionic afflib-tools –  3.7.16-2ubuntu0.1~esm1  
libafflib0v5 –  3.7.16-2ubuntu0.1~esm1  
16.04 xenial afflib-tools –  3.7.7-3ubuntu0.1~esm1  
libafflib0v5 –  3.7.7-3ubuntu0.1~esm1  

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›