2,451 results · Clear filters · Feed
-
High max 8.8
libvpx vulnerabilities
USN-6403-1 fixed several vulnerabilities in libvpx. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: It was discovered that libvpx did not properly handle certain malformed media files. If an application using lib…
first Nov 1, 2023 -
High max 7.0USN-6391-2 1 CVE
cups vulnerability
USN-6391-1 fixed a vulnerability in CUPS. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that CUPS incorrectly parsed certain Postscript objects. If a user or automated sys…
first Sep 21, 2023 -
High max 7.5USN-6366-1 1 CVE
postgresql-9.5 vulnerability
It was discovered that PostgreSQL incorrectly handled certain extension script substitutions. An attacker having database-level CREATE privileges can use this issue to execute arbitrary code as the bootstrap superuser.
first Sep 13, 2023 -
High max 7.1USN-6365-2 1 CVE
open-vm-tools vulnerability
USN-6365-1 fixed a vulnerability in Open VM Tools. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that Open VM Tools incorrectly handled SAML tokens. A remote attacker coul…
first Sep 25, 2023 -
High max 7.5USN-7365-1 2 CVEs
nltk vulnerabilities
It was discovered that NLTK contained a regex that is susceptible to catastrophic backtracking. An attacker could possibly use this issue to cause a denial of service. (CVE-2021-3842, CVE-2021-43854)
first Mar 24, 2025 -
High max 7.5USN-6358-1 1 CVE
ruby-redcloth vulnerability
It was discovered that RedCloth incorrectly handled certain inputs during html sanitisation. An attacker could possibly use this issue to cause a denial of service.
first Sep 12, 2023 -
High max 7.5USN-6336-1 2 CVEs
docker-registry vulnerabilities
It was discovered that Docker Registry incorrectly handled certain crafted input, A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-11468) It was discovered that Docker Registry …
first Sep 5, 2023 -
High max 7.5USN-6334-1 3 CVEs
atftp vulnerabilities
Peter Wang discovered that atftp did not properly manage certain inputs. A remote attacker could send a specially crafted tftp request to the server to cause a crash. (CVE-2020-6097) Andreas B. Mundt discovered that atftp did not properly manage certain input…
first Sep 4, 2023 -
High max 7.5USN-6287-1 2 CVEs
golang-yaml.v2 vulnerabilities
Simon Ferquel discovered that the Go yaml package incorrectly handled certain YAML documents. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause the system to cra…
first Aug 14, 2023 -
High max 8.8USN-6281-1 1 CVE
velocity vulnerability
Alvaro Munoz discovered that Velocity Engine incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code.
first Aug 10, 2023 -
High max 7.8USN-6275-1 1 CVE
cargo, rust-cargo vulnerability
Addison Crump discovered that Cargo incorrectly set file permissions on UNIX-like systems when extracting crate archives. If the crate would contain files writable by any user, a local attacker could possibly use this issue to execute code as another user.
first Aug 3, 2023 -
High max 7.5USN-6274-1 1 CVE
xmltooling vulnerability
Jurien de Jong discovered that XMLTooling did not properly handle certain KeyInfo element content within an XML signature. An attacker could possibly use this issue to achieve server-side request forgery.
first Aug 3, 2023 -
High max 7.5USN-6271-1 2 CVEs
maradns vulnerabilities
Xiang Li discovered that MaraDNS incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information. (CVE-2022-30256) H…
first Aug 3, 2023 -
High max 7.5USN-6263-1 7 CVEs
openjdk-8, openjdk-lts, openjdk-17 vulnerabilities
Motoyasu Saburi discovered that OpenJDK incorrectly handled special characters in file name parameters. An attacker could possibly use this issue to insert, edit or obtain sensitive information. This issue only affected OpenJDK 11 and OpenJDK 17. (CVE-2023-22…
first Aug 1, 2023 -
High max 7.2USN-6230-1 1 CVE
postgresql-9.5 vulnerability
Alexander Lakhin discovered that PostgreSQL incorrectly handled certain CREATE privileges. An authenticated user could possibly use this issue to execute arbitrary code as the bootstrap supervisor.
first Jul 13, 2023 -
High max 7.5USN-6225-1 1 CVE
knot-resolver vulnerability
It was discovered that Knot Resolver did not correctly handle certain client options. A remote attacker could send requests to malicous domains and cause a denial of service.
first Jul 13, 2023 -
High max 7.8USN-6180-1 7 CVEs
vlc vulnerabilities
It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were tricked into opening a crafted image file, a remote attacker could possibly use this issue to cause VLC to crash, leading to a denial of service. This iss…
first Jun 20, 2023 -
High max 7.5USN-6177-1 4 CVEs
libjettison-java vulnerabilities
It was discovered that Jettison incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
first Jun 19, 2023 -
High max 8.8USN-7358-1 4 CVEs
postgresql-9.5 vulnerabilities
Wolfgang Walther discovered that PostgreSQL incorrectly tracked tables with row security. A remote attacker could possibly use this issue to perform forbidden reads and modifications. (CVE-2024-10976) Jacob Champion discovered that PostgreSQL clients used unt…
first Mar 19, 2025 -
High max 7.5USN-7348-1 4 CVEs
python3.5, python3.8 vulnerabilities
It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered “private” or “globally reachable”. This could possibly result in applications applying incorrect security policies. This issue onl…
first Mar 12, 2025 -
High max 7.1USN-7346-1 13 CVEs
opensc vulnerabilities
It was discovered that OpenSC did not correctly handle certain memory operations, which could lead to a use-after-free vulnerability. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ub…
first Mar 12, 2025 -
High max 7.5USN-6164-2 2 CVEs
c-ares vulnerabilities
USN-6164-1 fixed several vulnerabilities in c-ares. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Hannes Moesl discovered that c-ares incorrectly handled certain ipv6 addresses. An attacker…
first Sep 11, 2023 -
High max 7.5USN-6128-2 1 CVE
cups vulnerability
USN-6128-1 fixed a vulnerability in CUPS. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that CUPS incorrectly handled logging. A remote attacker could use this issue to cause CUPS to crash, re…
first Jun 1, 2023 -
High max 7.0USN-6088-2 6 CVEs
runc vulnerabilities
USN-6088-1 fixed vulnerabilities in runC. This update provides the corresponding updates for Ubuntu 16.04 LTS. It was discovered that runC incorrectly performed access control when mounting /proc to non-directories. An attacker could possibly use this issue t…
first May 23, 2023 -
High max 8.1USN-6082-1 1 CVE
node-eventsource vulnerability
It was discovered that EventSource incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information.
first May 17, 2023 -
High max 7.4USN-6077-1 7 CVEs
openjdk-8, openjdk-lts, openjdk-17, openjdk-20 vulnerabilities
Ben Smyth discovered that OpenJDK incorrectly handled half-duplex connections during TLS handshake. A remote attacker could possibly use this issue to insert, edit or obtain sensitive information. (CVE-2023-21930) It was discovered that OpenJDK incorrectly ha…
first May 16, 2023 -
High max 7.5USN-6087-1 2 CVEs
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-28755) It was discovered that Ruby incorrectly handled certain regular expressions. An attacker coul…
first May 18, 2023 -
High max 8.8USN-6083-2 1 CVE
cups-filters vulnerability
USN-6083-1 fixed a vulnerability in cups-filters. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: It was discovered that cups-filters incorrectly handled the beh CUPS backend. A remote attacker could possibly use…
first Jun 19, 2023 -
High max 7.5USN-6065-1 2 CVEs
node-css-what vulnerabilities
It was discovered that css-what incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-33587, CVE-2…
first May 10, 2023 -
High max 7.5USN-6060-2 2 CVEs
mysql-5.7 vulnerabilities
USN-6060-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first May 8, 2023 -
High max 7.8USN-6058-1 1 CVE
linux-aws, linux-aws-hwe vulnerability
It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix …
first May 5, 2023 -
High max 7.5USN-6541-1 3 CVEs
glibc vulnerabilities
It was discovered that the GNU C Library was not properly handling certain memory operations. An attacker could possibly use this issue to cause a denial of service (application crash). (CVE-2023-4806, CVE-2023-4813) It was discovered that the GNU C library w…
first Dec 7, 2023 -
High max 7.5USN-6055-1 2 CVEs
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-28755) It was discovered that Ruby incorrectly handled certain regular expressions. An attacker coul…
first May 4, 2023 -
High max 7.7USN-6053-1 1 CVE
php7.0 vulnerability
It was discovered that PHP incorrectly handled certain invalid Blowfish password hashes. An invalid password hash could possibly allow applications to accept any password as valid, contrary to expectations.
first May 2, 2023 -
High max 7.5USN-6050-2 2 CVEs
git vulnerabilities
USN-6050-1 fixed several vulnerabilities in Git. This update provides the corresponding updates for CVE-2023-25652 and CVE-2023-29007 on Ubuntu 16.04 LTS. Original advisory details: It was discovered that Git incorrectly handled certain commands. An attacker …
first May 17, 2023 -
High max 7.5USN-6049-1 9 CVEs
netty vulnerabilities
It was discovered that Netty's Zlib decoders did not limit memory allocations. A remote attacker could possibly use this issue to cause Netty to exhaust memory via malicious input, leading to a denial of service. This issue only affected Ubuntu 16.04 ESM and …
first Apr 28, 2023 -
High max 7.8USN-6003-1 1 CVE
emacs24 vulnerability
Xi Lu discovered that Emacs did not properly handle certain inputs. An attacker could possibly use this issue to execute arbitrary commands.
first Apr 6, 2023 -
High max 7.7USN-5997-1 1 CVE
ipmitool vulnerability
It was discovered that IPMItool was not properly checking the data received from a remote LAN party. A remote attacker could possibly use this issue to to cause a crash or arbitrary code execution.
first Apr 4, 2023 -
High max 7.5USN-5996-1 3 CVEs
liblouis vulnerabilities
It was discovered that Liblouis incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-26767, CVE-2023-26768, CVE-2023-26769)
first Apr 4, 2023 -
High max 7.5USN-5989-1 1 CVE
glusterfs vulnerability
Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could possibly use this issue to cause a denial of service.
first Mar 30, 2023