Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4243-1 advisory.

    It was discovered that libbsd incorrectly handled certain inputs. An attacker could possibly use this     issue to execute arbitrary code. This issue only affected Ubuntu 14.04 ESM. (CVE-2016-2090)

    It was discovered that libbsd incorrectly handled certain strings. An attacker could possibly use this     issue to access sensitive information. (CVE-2019-20367)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An issues has been found in libbsd, a package containing utility functions from BSD systems.

In function fgetwln() an off-by-one error could triggers a heap buffer overflow.

For Debian 8 'Jessie', this problem has been fixed in version 0.7.0-2+deb8u1.

We recommend that you upgrade your libbsd packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2016-2090

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201607-13 (libbsd: Arbitrary code execution)

    libbsd contains a buffer overflow in the fgetwln() function. An if       statement, which is responsible for checking the necessity to reallocate       memory in the target buffer, is off by one therefore an out of bounds       write occurs.
  Impact :

    Remote attackers could potentially execute arbitrary code with the       privileges of the process.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
133144	Ubuntu 16.04 LTS / 18.04 LTS : libbsd vulnerabilities (USN-4243-1)	Nessus	Ubuntu Local Security Checks	critical
132514	Debian DLA-2052-1 : libbsd security update	Nessus	Debian Local Security Checks	critical
96217	Fedora 25 : libbsd (2016-d3e562bb52)	Nessus	Fedora Local Security Checks	critical
96205	Fedora 24 : libbsd (2016-5c3d057783)	Nessus	Fedora Local Security Checks	critical
92483	GLSA-201607-13 : libbsd: Arbitrary code execution	Nessus	Gentoo Local Security Checks	critical

Detections

Analytics

CVE-2016-2090

critical

Tenable Plugins

critical

critical

critical

critical

critical