USN-5262-1: GPT fdisk vulnerabilities

Releases

• Ubuntu 16.04 ESM

Packages

• gdisk - GPT fdisk text-mode partitioning tool

Details

The potential for an out of bounds write due to a missing bounds
check was discovered to impact the sgdisk utility of GPT fdisk.
Exploitation requires the use of a maliciously formatted storage
device and could cause sgdisk to crash as well as possibly
allow for local privilege escalation.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 16.04

• gdisk - 1.0.1-1ubuntu0.1~esm2
  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

• CVE-2020-0256
• CVE-2021-0308