2,451 results · Clear filters · Feed
-
High max 7.5USN-7543-1 2 CVEs
libsoup3, libsoup2.4 vulnerabilities
Jan Różański discovered that libsoup incorrectly handled certain headers when sending HTTP/2 requests over TLS. An attacker could possibly use this issue to cause a denial of service. This issue only affected libsoup3 in Ubuntu 24.04 LTS, Ubuntu 24.10, and Ub…
first May 28, 2025 -
High max 7.5USN-7507-1 2 CVEs
ruby-rack vulnerabilities
It was discovered that Rack incorrectly handled deleted rack sessions. An attacker could possibly use this issue to expose sensitive information or to gain unauthorized access to user accounts. (CVE-2025-32441) It was discovered that Rack incorrectly limited …
first May 12, 2025 -
High max 7.5USN-7488-1 3 CVEs
python vulnerabilities
It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack. This issue only affected python 2.7 and python3.4 on Ubuntu 14.04 LTS; python2.7…
first May 6, 2025 -
High max 7.4USN-7480-1 3 CVEs
openjdk-8 vulnerabilities
Alicja Kario discovered that the JSSE component of OpenJDK 8 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain sensitive information. (CVE-2025-21587) It was discovered that the Compiler component of OpenJDK 8 incorrectly ha…
first May 6, 2025 -
High max 7.2USN-7441-1 2 CVEs
mosquitto vulnerabilities
It was discovered that Eclipse Mosquitto client incorrectly handled memory when receiving a SUBACK packet. An attacker with a malicious broker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2024-10525) Xiangpu Song …
first Apr 16, 2025 -
High max 7.5USN-7404-1 4 CVEs
phpseclib vulnerabilities
It was discovered that phpseclib did not correctly handle RSA PKCS#1 v1.5 signature verification. An attacker could possibly use this issue to bypass authentication. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-30130) It was discovered that phpseclib …
first Apr 2, 2025 -
High max 7.5USN-7368-1 1 CVE
snakeyaml vulnerability
It was discovered that SnakeYAML incorrectly handled recursive entity references. An attacker could possibly use this issue to cause SnakeYAML to crash, resulting in a denial of service.
first Mar 27, 2025 -
High max 7.3USN-7367-1 5 CVEs
zvbi vulnerabilities
It was discovered that zvbi incorrectly handled memory when processing user input. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Mar 24, 2025 -
High max 7.5USN-7366-1 3 CVEs
ruby-rack vulnerabilities
Nhật Thái Đỗ discovered that Rack incorrectly handled certain usernames. A remote attacker could possibly use this issue to perform CRLF injection. (CVE-2025-25184) Phạm Quang Minh discovered that Rack incorrectly handled certain headers. A remote attacker co…
first Mar 24, 2025 -
High max 8.6USN-7356-1 2 CVEs
uriparser vulnerabilities
It was discovered that uriparser did not correctly handle certain inputs, which could lead to an integer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-34402, CVE-2024-34403)
first Mar 19, 2025 -
High max 8.1
freetype vulnerabilities
USN-7352-1 fixed a vulnerability in FreeType. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This update also fixes an additional vulnerability in Ubuntu 14.04 LTS. Original advisory details: It was discovered that F…
first Mar 17, 2025 -
High max 7.8USN-7299-4 8 CVEs
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 regression
USN-7299-2 fix vulnerabilities in X.Org X Server. This fix caused a regression in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This update fix the regression and re-apply the fix for the CVE listed. We apologize for the inconvenience. Original advisory details: Jan…
first Mar 17, 2025 -
High max 7.8USN-7299-2 8 CVEs
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerabilities
USN-7299-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operat…
first Mar 10, 2025 -
High max 7.2
lucene-solr vulnerability
It was discovered that the Apache Solr DataImportHandler module incorrectly handled certain request parameters in a default configuration. A remote attacker could possibly use this issue to execute arbitrary code.
first Feb 21, 2025 -
High max 8.1
tomcat7 vulnerabilities
It was discovered that Tomcat incorrectly handled being configured with HTTP PUTs enabled. A remote attacker could use this issue to upload a JSP file to the server and execute arbitrary code.
first Feb 21, 2025 -
High max 7.8USN-7266-1 9 CVEs
digikam vulnerabilities
Zinuo Han and Ao Wang discovered that the Android DNG SDK, vendored in digiKam, did not correctly parse certain files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu …
first Feb 13, 2025 -
High max 8.8USN-7265-1 2 CVEs
bluez vulnerabilities
Julian Rauchberger discovered that BlueZ did not correctly handle certain memory operations. An attacker could possibly use this issue to leak sensitive information or execute arbitrary code. (CVE-2019-8921, CVE-2019-8922)
first Feb 12, 2025 -
High max 8.1USN-7248-1 1 CVE
libndp vulnerability
It was discovered that libndp incorrectly handled certain malformed IPv6 router advertisement packets. A local attacker could possibly use this issue to cause NetworkManager to crash, resulting in a denial of service, or the execution of arbitrary code.
first Feb 3, 2025 -
High max 8.0USN-7243-1 1 CVE
vlc vulnerability
It was discovered that VLC incorrectly handled memory when reading an MMS stream. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Jan 30, 2025 -
High max 7.5USN-7231-1 9 CVEs
tcpreplay vulnerabilities
It was discovered that Tcpreplay incorrectly handled memory when using the tcprewrite utility. A remote attacker could possibly use this issue to cause Tcpreplay to crash, resulting in a denial of service. (CVE-2023-27783) It was discovered that Tcpreplay inc…
first Jan 28, 2025 -
High max 7.5USN-7227-1 1 CVE
PCL vulnerability
It was discovered that PCL incorrectly handled certain malformed files. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly exploit this to cause a denial of service.
first Jan 23, 2025 -
High max 7.8USN-7209-1 1 CVE
gimp-dds vulnerabilities
Jacob Boerema discovered that the GIMP DDS Plugin incorrectly processed DDS files due to a memory issue. An attacker could exploit this through a specifically crafted DDS file to cause GIMP to crash, resulting in a denial of service, or possibly execute arbit…
first Jan 16, 2025 -
High max 7.0USN-7203-1 6 CVEs
pdns, pdns-recursor vulnerabilities
Wei Hao discovered that PowerDNS Authoritative Server incorrectly handled memory when accessing certain files. An attacker could possibly use this issue to achieve arbitrary code execution. (CVE-2018-1046) It was discovered that PowerDNS Authoritative Server …
first Jan 14, 2025 -
High max 7.8USN-7117-1 5 CVEs
Several security issues were fixed in needrestart and Module::ScanDeps
Qualys discovered that needrestart passed unsanitized data to a library (libmodule-scandeps-perl) which expects safe input. A local attacker could possibly use this issue to execute arbitrary code as root. (CVE-2024-11003) Qualys discovered that the library l…
first Nov 19, 2024 -
High max 7.8
roundcube vulnerability
It was discovered that Roundcube incorrectly handled certain file-based attachment plugins. An attacker could exploit this to gain unauthorized access to arbitrary files on the host’s file system.
first Jan 13, 2025 -
High max 7.8USN-7168-1 2 CVEs
editorconfig-core vulnerabilities
It was discovered that EditorConfig improperly managed memory when handling certain inputs, leading to overflows. An attacker could possibly use these issues to cause a denial of service, or execute arbitrary code.
first Dec 18, 2024 -
High max 7.5USN-7160-1 1 CVE
mpmath vulnerability
It was discovered Mpmath incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause Mpmath to consume resources, leading to a denial of service.
first Dec 15, 2024 -
High max 8.1USN-7151-1 2 CVEs
ofono vulnerabilities
It was discovered that oFono incorrectly handled decoding SMS messages leading to a stack overflow. A remote attacker could potentially use this issue to cause a denial of service. (CVE-2023-4232, CVE-2023-4235)
first Dec 11, 2024 -
High max 8.8USN-7149-1 5 CVEs
intel-microcode vulnerabilities
Avraham Shalev and Nagaraju N Kodalapura discovered that some Intel(R) Xeon(R) processors did not properly restrict access to the memory controller when using Intel(R) SGX. This may allow a local privileged attacker to further escalate their privileges. (CVE-…
first Dec 11, 2024 -
High max 8.1USN-7141-1 3 CVEs
ofono vulnerabilities
It was discovered that oFono incorrectly handled decoding SMS messages leading to a stack overflow. A remote attacker could potentially use this issue to cause a denial of service. (CVE-2023-2794, CVE-2023-4233, CVE-2023-4234)
first Dec 9, 2024 -
High max 7.8USN-7138-1 4 CVEs
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Dec 5, 2024 -
High max 7.5USN-7136-2 1 CVE
python-django vulnerability
USN-7136-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: jiangniao discovered that Django incorrectly handled the API to strip tags. A remote attacker could…
first Dec 4, 2024 -
High max 7.8USN-7085-2 1 CVE
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerability
USN-7085-1 fixed a vulnerability in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operations in …
first Oct 30, 2024 -
High max 7.5USN-7077-1 1 CVE
amd64-microcode vulnerability
Enrique Nissim and Krzysztof Okupski discovered that some AMD processors did not properly restrict access to the System Management Mode (SMM) configuration when the SMM Lock was enabled. A privileged local attacker could possibly use this issue to further esc…
first Oct 21, 2024 -
High max 7.5USN-7049-2 2 CVEs
php7.0, php7.2 vulnerabilities
USN-7049-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled parsing multipart form data. A remote attacker could p…
first Nov 14, 2024 -
High max 8.8USN-6879-1 13 CVEs
virtuoso-opensource vulnerabilities
Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL statements. An attacker could possibly use this issue to crash the program, resulting in a denial of service. (CVE-2023-31620, CVE-2023-31622, CVE-2023-31624, CVE…
first Jul 4, 2024 -
High max 7.4USN-7096-1 20 CVEs
openjdk-8 vulnerabilities
Andy Boothe discovered that the Networking component of OpenJDK 8 did not properly handle access under certain circumstances. An unauthenticated attacker could possibly use this issue to cause a denial of service. (CVE-2024-21208) It was discovered that the H…
first Nov 11, 2024 -
High max 8.6USN-7041-3 1 CVE
cups vulnerability
USN-7041-1 fixed a vulnerability in CUPS. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: Simone Margaritelli discovered that CUPS incorrectly sanitized IPP data when creating PPD files. A remote attacker could p…
first Oct 7, 2024 -
High max 7.5USN-7015-2 2 CVEs
python2.7, python3.5 vulnerabilities
USN-7015-1 fixed several vulnerabilities in Python. This update provides one of the corresponding updates for python2.7 for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS, and a second for python3.5 for Ubuntu 16.04 LTS. Original a…
first Sep 19, 2024 -
High max 7.5USN-7010-1 9 CVEs
dcmtk vulnerabilities
Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue…
first Sep 17, 2024