Test ID:	1.3.6.1.4.1.25623.1.1.12.2023.6282.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6282-1)
Summary:	The remote host is missing an update for the 'velocity-tools' package(s) announced via the USN-6282-1 advisory.
Description:	Summary: The remote host is missing an update for the 'velocity-tools' package(s) announced via the USN-6282-1 advisory. Vulnerability Insight: Jackson Henry discovered that Velocity Tools incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. Affected Software/OS: 'velocity-tools' package(s) on Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-13959 https://security.gentoo.org/glsa/202107-52 https://lists.apache.org/thread.html/r6802a38c3041059e763a1aadd7b37fe95de75408144b5805e29b84e3%40%3Cuser.velocity.apache.org%3E https://lists.apache.org/thread.html/rf9868c564cff7adfd5283563f2309b93b3e496354a211a57503b2f72@%3Cannounce.apache.org%3E https://lists.debian.org/debian-lts-announce/2021/03/msg00021.html http://www.openwall.com/lists/oss-security/2021/03/10/2 https://lists.apache.org/thread.html/rb042f3b0090e419cc9f5a3d32cf0baff283ccd6fcb1caea61915d6b6@%3Ccommits.velocity.apache.org%3E https://lists.apache.org/thread.html/r6802a38c3041059e763a1aadd7b37fe95de75408144b5805e29b84e3@%3Cuser.velocity.apache.org%3E https://lists.apache.org/thread.html/r97edad0655770342d2d36620fb1de50b142fcd6c4f5c53dd72ca41d7@%3Cuser.velocity.apache.org%3E
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.