USN-6692-1: Gson vulnerability
It was discovered that Gson incorrectly handled deserialization of untrusted input data. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6692-1?
The severity of USN-6692-1 is classified as a potential denial of service vulnerability.
How do I fix USN-6692-1?
To fix USN-6692-1, upgrade to the patched versions of libgoogle-gson-java as specified in the advisory for your Ubuntu version.
Which Ubuntu versions are affected by USN-6692-1?
USN-6692-1 affects Ubuntu 16.04, 18.04, 20.04, and 22.04 with specific versions of libgoogle-gson-java.
What is the impact of the vulnerability identified by USN-6692-1?
The impact of the vulnerability identified by USN-6692-1 could allow a remote attacker to cause a denial of service.
Is user intervention required for the USN-6692-1 vulnerability to be exploited?
Yes, user intervention is required as the vulnerability can be triggered by opening specially crafted input files.