2,451 results · Clear filters · Feed
-
High max 7.8USN-5064-3 1 CVE
cpio vulnerability
USN-5064-1 fixed a vulnerability in GNU. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Maverick Chung and Qiaoyi Fang discovered that cpio incorrectly handled certain pattern files. A remote attacker could use …
first Aug 3, 2023 -
High max 7.4USN-5051-2 1 CVE
openssl vulnerability
USN-5051-1 fixed a vulnerability in OpenSSL. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Ingo Schwarze discovered that OpenSSL incorrectly handled certain ASN.1 strings. A remote attacker…
first Aug 26, 2021 -
High max 8.3
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerability
Andy Nguyen discovered that the netfilter subsystem in the Linux kernel contained an out-of-bounds write in its setsockopt() implementation. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
first Aug 12, 2021 -
High max 7.8USN-5018-1 12 CVEs
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that the virtual file system implementation in the Linux kernel contained an unsigned to signed integer conversion error. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2021-33909)…
first Jul 20, 2021 -
High max 7.8USN-5003-1 3 CVEs
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code. (CVE-2021-3609) It was discovered that the…
first Jun 23, 2021 -
High max 7.4USN-4969-2 1 CVE
isc-dhcp vulnerability
USN-4969-1 fixed a vulnerability in DHCP. This update provides the corresponding update for Ubuntu 14.04 ESM and 16.04 ESM. Original advisory details: Jon Franklin and Pawel Wieczorkiewicz discovered that DHCP incorrectly handled lease file parsing. A remote …
first May 27, 2021 -
High max 7.3USN-4965-2 11 CVEs
apport vulnerabilities
USN-4965-1 fixed several vulnerabilities in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Maik Münch discovered that Apport incorrectly handled certain information gathering operati…
first May 25, 2021 -
High max 7.5USN-5221-1 9 CVEs
redis vulnerabilities
It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-32626) It was discovered that Redis incorrectly handled s…
first Aug 3, 2022 -
High max 7.5USN-4932-2 1 CVE
python-django vulnerability
USN-4932-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Django incorrectly handled certain filenames. A remote attacker could possib…
first May 13, 2021 -
High max 7.5USN-4920-1 5 CVEs
zeromq3 vulnerabilities
It was discovered that ZeroMQ incorrectly handled certain application metadata. A remote attacker could use this issue to cause ZeroMQ to crash, or possibly execute arbitrary code. (CVE-2019-13132) It was discovered that ZeroMQ mishandled certain network traf…
first Jun 15, 2022 -
High max 7.5USN-4897-2 2 CVEs
pygments vulnerabilities
USN-4897-1 fixed several vulnerabilities in Pygments. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Ben Caller discovered that Pygments incorrectly handled parsing certain files. If a user or automated system w…
first Aug 14, 2023 -
High max 7.5USN-5233-2 1 CVE
clamav vulnerability
USN-5233-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled memory when the CL_SCAN_GENERAL_COLLECT_METADATA …
first Jan 19, 2022 -
High max 7.5USN-4852-1 2 CVEs
vtk vulnerabilities
It was discovered that VTK incorrectly handled certain XML files in the embedded Expat library. An attacker could possibly use this issue to cause a denial of service or expose sensitive information.
first Mar 15, 2021 -
High max 7.5USN-4839-1 2 CVEs
python-gnupg vulnerabilities
Marcus Brinkmann discovered that python-gnupg improperly handled certain command line parameters. A remote attacker could use this to spoof the output of python-gnupg and cause unsigned e-mail to appear signed. (CVE-2018-12020) It was discovered that python-g…
first Mar 15, 2021 -
High max 7.0USN-4819-1 3 CVEs
leptonlib vulnerabilities
It was discovered that Leptonica incorrectly handled path names. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 ESM. (CVE-2017-18196) It was discovered that Leptonica incorrectly handled certai…
first Mar 15, 2021 -
High max 8.2USN-4818-1 5 CVEs
opencv vulnerabilities
It was discovered that OpenCV did not properly manage certain objects, leading to a divide-by-zero. If a user were tricked into loading a specially crafted file, a remote attacker could potentially use this issue to cause a denial of service or possibly execu…
first Sep 28, 2022 -
High max 7.5USN-5675-1 4 CVEs
heimdal vulnerabilities
Isaac Boukris and Andrew Bartlett discovered that Heimdal's KDC was not properly performing checksum algorithm verifications in the S4U2Self extension module. An attacker could possibly use this issue to perform a machine-in-the-middle attack and request S4U2…
first Oct 13, 2022 -
High max 7.5USN-4799-1 1 CVE
r-base vulnerability
It was discovered that a buffer overflow in R causes memory corruption. An attacker could possibly use this to cause a denial of service or execute arbitrary code.
first Mar 15, 2021 -
High max 7.5USN-4789-1 3 CVEs
zookeeper vulnerabilities
It was discovered that Apache ZooKeeper incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2016-5017) It was discovered that Apache ZooKeeper incorrectly implemented "wc…
first Mar 15, 2021 -
High max 7.5USN-4783-1 1 CVE
node-minimatch vulnerability
It was discovered that minimatch did not perform necessary bounds checking on regular expressions. An attacker could use this vulnerability to cause a denial of service.
first Mar 15, 2021 -
High max 7.5USN-4777-1 1 CVE
node-tar vulnerability
It was discovered that node-tar mishandled certain tar archives. An attacker could use this vulnerability to write arbitrary files to the filesystem.
first Mar 15, 2021 -
High max 7.5USN-4776-1 1 CVE
node-semver vulnerability
It was discovered that semver incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service.
first Mar 15, 2021 -
High max 8.8USN-4774-1 6 CVEs
libspring-java vulnerabilities
Toshiaki Maki discovered that Spring Framework incorrectly handled certain XML files. A remote attacker could exploit this with a crafted XML file to cause a denial of service. (CVE-2015-3192) Alvaro Muñoz discovered that Spring Framework incorrectly handled …
first Mar 17, 2021 -
High max 8.8USN-4770-1 22 CVEs
glusterfs vulnerabilities
It was discovered that GlusterFS incorrectly handled network requests. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM. (CVE-2014-3619) It was discovered that GlusterFS incorrectly handled user…
first Mar 15, 2021 -
High max 7.3USN-4766-1 2 CVEs
commons-beanutils vulnerabilities
It was discovered that Apache Commons BeanUtils improperly handled certain input. An attacker could possibly use this vulnerability to cause a crash or execute arbitrary code.
first Mar 15, 2021 -
High max 7.5USN-4700-1 1 CVE
pyxdg vulnerability
Alexandre D'Hondt discovered that PyXDG did not properly sanitize input. An attacker could exploit this with a crafted .menu file to execute arbitrary code.
first Jan 19, 2021 -
High max 7.5USN-4692-1 2 CVEs
tar vulnerabilities
Chris Siebenmann discovered that tar incorrectly handled extracting files resized during extraction when invoked with the --sparse flag. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu …
first Jan 13, 2021 -
High max 7.8USN-4402-1 2 CVEs
curl vulnerabilities
Marek Szlagor, Gregory Jefferis and Jeroen Ooms discovered that curl incorrectly handled certain credentials. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-8169…
first Jun 24, 2020 -
High max 7.5USN-4863-1 1 CVE
node-fstream vulnerability
It was discovered that fstream incorrectly handled certain crafted tarballs. An attacker could use this vulnerability to write arbitrary files to the filesystem.
first Mar 15, 2021 -
High max 7.5USN-4378-1 1 CVE
flask vulnerability
It was discovered that Flask incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service.
first Jun 1, 2020 -
High max 7.8USN-4360-4 1 CVE
json-c vulnerability
USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak that was reverted in USN-4360-2 and USN-4360-3. This update provides the correct fix update for CVE-2020-12762. Original advisory details: It was discovered that json-c inco…
first May 28, 2020 -
High max 7.8USN-4360-1 1 CVE
json-c vulnerability
It was discovered that json-c incorrectly handled certain JSON files. An attacker could possibly use this issue to execute arbitrary code.
first May 14, 2020 -
High max 7.5USN-4274-1 2 CVEs
libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a denial of service. (CVE-2019-19956, CVE-2020-7595)
first Feb 10, 2020 -
High max 7.5USN-4249-1 1 CVE
e2fsprogs vulnerability
It was discovered that e2fsprogs incorrectly handled certain ext4 partitions. An attacker could possibly use this issue to execute arbitrary code.
first Jan 23, 2020 -
High max 7.5USN-4164-1 3 CVEs
libxslt vulnerabilities
It was discovered that Libxslt incorrectly handled certain documents. An attacker could possibly use this issue to access sensitive information. This issue not affected Ubuntu 19.10. (CVE-2019-13117, CVE-2019-13118) It was discovered that Libxslt incorrectly …
first Oct 22, 2019 -
High max 8.8
drupal7 vulnerabilities
USN-6981-1 fixed vulnerabilities in Drupal. This update provides the corresponding updates for Ubuntu 14.04 LTS. Original advisory details: It was discovered that Drupal incorrectly sanitized uploaded filenames. A remote attacker could possibly use this issue…
first Sep 3, 2024 -
High max 7.5USN-6644-1 3 CVEs
tiff vulnerabilities
It was discovered that LibTIFF incorrectly handled certain files. If a user were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause the application to crash, resulting in a denial of service. (CVE-2023-52356) It …
first Feb 19, 2024 -
High max 7.8USN-6601-1 1 CVE
linux vulnerability
It was discovered that the IGMP protocol implementation in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
first Jan 25, 2024 -
High max 7.5USN-7903-1 2 CVEs
python-django vulnerabilities
It was discovered that Django incorrectly handled certain characters in the FilteredRelation object. An attacker could possibly use this issue to execute arbitrary SQL commands. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ub…
first Dec 2, 2025 -
High max 7.5USN-7890-1 1 CVE
ffmpeg vulnerability
It was discovered that FFmpeg did not properly handle the parsing of certain malformed HLS playlists. If a user were tricked into opening a specially crafted HLS playlist, an attacker could possibly use this issue to cause FFmpeg to crash, resulting in a deni…
first Nov 26, 2025