Critical Vulnerabilities in Apache Commons BeanUtils and mod_jk Affect Ubuntu 18.04 LTS

Recent updates for Ubuntu 18.04 LTS revealed critical vulnerabilities in Apache Commons BeanUtils and mod_jk. The first issue, CVE-2014-0114 and CVE-2019-10086, allows attackers to execute arbitrary code due to improper property access. The second, CVE-2023-41081, exposes sensitive information or leads to denial of service via incorrect shared memory permissions. Both vulnerabilities were initially fixed in prior updates but were dropped during the update preparation phase. Users are advised to update their systems to mitigate these risks. The vulnerabilities impact systems running Ubuntu 18.04 LTS and require immediate attention from administrators. Ubuntu Pro provides extended security coverage for affected packages.

Key Points: • CVE-2014-0114 and CVE-2019-10086 allow arbitrary code execution in Apache Commons BeanUtils. • CVE-2023-41081 exposes sensitive data or causes denial of service in mod_jk. • Users of Ubuntu 18.04 LTS must update their systems to address these critical vulnerabilities.