Ubuntu: Brotli mishandles streams, enabling possible DoS or code execution
Original title: USN-8956-1: Brotli vulnerability
USN-8956-1 says a remote attacker could abuse malformed compressed streams; no CVE, versions, or exploitation status are given.
Ubuntu security notice USN-8956-1 reports that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use the issue to cause a denial of service or execute arbitrary code. The notice snippet does not name a CVE, affected versions, or a fix.
Unconfirmed: The snippet does not state whether the issue is exploited or which releases are fixed.
- The flaw is in how Brotli handles certain compressed streams.
- Impact described is denial of service or arbitrary code execution.
- The snippet names no CVE and no fixed package version.
Impact: Possible denial of service or arbitrary code execution
| Product | Affected |
|---|---|
| Brotli | — |
From the original article
It was discovered that Brotli incorrectly handled certain compressed streams. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.