2,451 results · Clear filters · Feed
-
High max 7.8USN-6407-1 3 CVEs
libx11 vulnerabilities
Gregory James Duck discovered that libx11 incorrectly handled certain keyboard symbols. If a user were tricked into connecting to a malicious X server, a remote attacker could use this issue to cause libx11 to crash, resulting in a denial of service, or possi…
first Oct 3, 2023 -
High max 7.0USN-6517-1 2 CVEs
perl vulnerabilities
It was discovered that Perl incorrectly handled printing certain warning messages. An attacker could possibly use this issue to cause Perl to consume resources, leading to a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-48522) Nathan…
first Nov 27, 2023 -
High max 8.8USN-6562-1 16 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…
first Jan 2, 2024 -
High max 7.5USN-6425-1 4 CVEs
samba vulnerabilities
Sri Nagasubramanian discovered that the Samba acl_xattr VFS module incorrectly handled read-only files. When Samba is configured to ignore system ACLs, a remote attacker could possibly use this issue to truncate read-only files. (CVE-2023-4091) Andrew Bartlet…
first Oct 10, 2023 -
High max 8.8
libvpx vulnerabilities
It was discovered that libvpx did not properly handle certain malformed media files. If an application using libvpx opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.
first Oct 2, 2023 -
High max 8.8USN-6538-2 3 CVEs
postgresql-10 vulnerabilities
USN-6538-1 fixed several vulnerabilities in PostgreSQL. This update provides the corresponding updates for Ubuntu 18.04 LTS. Original advisory details: Jingzhou Fu discovered that PostgreSQL incorrectly handled certain unknown arguments in aggregate function …
first Jan 17, 2024 -
High max 7.8USN-6555-1 2 CVEs
xorg-server, xwayland vulnerabilities
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled XKB button actions. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges. (CVE-2023-6377) Jan-Niklas Sohn discovered tha…
first Dec 13, 2023 -
High max 8.8USN-6550-1 3 CVEs
postfixadmin vulnerabilities
It was discovered that Smarty, that is integrated in the PostfixAdmin code, was not properly sanitizing user input when generating templates. An attacker could, through PHP injection, possibly use this issue to execute arbitrary code. (CVE-2022-29221) It was …
first Dec 12, 2023 -
High max 7.5USN-6507-1 1 CVE
glusterfs vulnerability
It was discovered that GlusterFS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause GlusterFS to crash, resulting in a denial of service.
first Nov 22, 2023 -
High max 8.8USN-6538-1 3 CVEs
postgresql-12, postgresql-14, postgresql-15 vulnerabilities
Jingzhou Fu discovered that PostgreSQL incorrectly handled certain unknown arguments in aggregate function calls. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2023-5868) Pedro Gallegos discovered that PostgreSQL incorr…
first Dec 6, 2023 -
High max 7.7USN-6523-1 3 CVEs
u-boot-nezha vulnerability
It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-2347) Nicolas Bidron and …
first Nov 29, 2023 -
High max 7.1USN-6514-1 1 CVE
openvswitch vulnerability
It was discovered that Open vSwitch did not correctly handle OpenFlow rules for ICMPv6 Neighbour Advertisement packets. A local attacker could possibly use this issue to redirect traffic to arbitrary IP addresses.
first Nov 26, 2023 -
High max 7.5
nghttp2 vulnerability
It was discovered that nghttp2 incorrectly handled request cancellation. A remote attacker could possibly use this issue to cause nghttp2 to consume resources, leading to a denial of service.
first Nov 22, 2023 -
High max 8.8USN-6526-1 6 CVEs
gst-plugins-bad1.0 vulnerabilities
It was discovered that GStreamer Bad Plugins incorrectly handled certain media files. A remote attacker could use this issue to cause GStreamer Bad Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Nov 29, 2023 -
High max 7.5
dotnet6, dotnet7 vulnerability
It was discovered that the .NET Kestrel web server did not properly handle HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service.
first Oct 10, 2023 -
High max 7.5USN-6410-1 2 CVEs
grub2-signed, grub2-unsigned vulnerabilities
It was discovered that a specially crafted file system image could cause a heap-based out-of-bounds write. A local attacker could potentially use this to perform arbitrary code execution bypass and bypass secure boot protections. (CVE-2023-4692) It was discov…
first Oct 4, 2023 -
High max 7.8USN-6408-1 4 CVEs
libxpm vulnerabilities
Yair Mizrahi discovered that libXpm incorrectly handled certain malformed XPM image files. If a user were tricked into opening a specially crafted XPM image file, a remote attacker could possibly use this issue to consume memory, leading to a denial of servic…
first Oct 3, 2023 -
High max 7.0USN-6391-1 1 CVE
cups vulnerability
It was discovered that CUPS incorrectly parsed certain Postscript objects. If a user or automated system were tricked into printing a specially crafted document, a remote attacker could use this issue to cause CUPS to crash, resulting in a denial of service, …
first Sep 20, 2023 -
High max 7.8USN-6453-1 2 CVEs
xorg-server, xwayland vulnerabilities
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled prepending values to certain properties. An attacker could possibly use this issue to cause the X Server to crash, execute arbitrary code, or escalate privileges. (CVE-2023-5367) Sri disco…
first Oct 25, 2023 -
High max 7.5USN-6450-1 4 CVEs
openssl vulnerabilities
Tony Battersby discovered that OpenSSL incorrectly handled key and initialization vector (IV) lengths. This could lead to truncation issues and result in loss of confidentiality for some symmetric cipher modes. (CVE-2023-5363) Juerg Wullschleger discovered th…
first Oct 24, 2023 -
High max 8.8USN-6423-1 1 CVE
libcue vulnerability
It was discovered that CUE incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code.
first Oct 9, 2023 -
High max 8.6USN-6307-1 1 CVE
cjose vulnerability
It was discovered that JOSE for C/C++ AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the JWE. An attacker could use this to cause a denial of service (system crash) or might expose sensitive informati…
first Aug 24, 2023 -
High max 7.4USN-6293-1 1 CVE
heat vulnerability
It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data.
first Aug 16, 2023 -
High max 8.2USN-6306-1 7 CVEs
fastdds vulnerabilities
It was discovered that Fast DDS incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service and information exposure. This issue only affected Ubuntu 22.04 LTS. (CVE-2021-38425) It was discovered that Fast …
first Aug 24, 2023 -
High max 7.1USN-6295-1 1 CVE
libpod vulnerability
It was discovered that Podman incorrectly handled certain supplementary groups. An attacker could possibly use this issue to expose sensitive information or execute binary code.
first Aug 16, 2023 -
High max 7.6USN-6269-1 1 CVE
gst-plugins-good1.0 vulnerability
It was discovered that GStreamer Good Plugins incorrectly handled certain FLAC image tags. A remote attacker could use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-37327)
first Aug 2, 2023 -
High max 8.1USN-6449-1 8 CVEs
ffmpeg vulnerabilities
It was discovered that FFmpeg incorrectly managed memory resulting in a memory leak. An attacker could possibly use this issue to cause a denial of service via application crash. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-22038)…
first Oct 24, 2023 -
High max 7.7USN-5967-1 3 CVEs
node-object-path vulnerabilities
It was discovered that the set() method in object-path could be corrupted as a result of prototype pollution by sending a message to the parent process. An attacker could use this issue to cause object-path to crash. (CVE-2020-15256, CVE-2021-23434, CVE-2021-…
first Mar 22, 2023 -
High max 7.5USN-5844-1 8 CVEs
openssl vulnerabilities
David Benjamin discovered that OpenSSL incorrectly handled X.400 address processing. A remote attacker could possibly use this issue to read arbitrary memory contents or cause OpenSSL to crash, resulting in a denial of service. (CVE-2023-0286) Corey Bonnell d…
first Feb 7, 2023 -
High max 7.8USN-5847-1 3 CVEs
grunt vulnerabilities
It was discovered that Grunt was not properly loading YAML files before parsing them. An attacker could possibly use this issue to execute arbitrary code. (CVE-2020-7729) It was discovered that Grunt was not properly handling symbolic links when performing fi…
first Feb 7, 2023 -
High max 7.5USN-6183-1 2 CVEs
bind9 vulnerabilities
Shoham Danino, Anat Bremler-Barr, Yehuda Afek, and Yuval Shavitt discovered that Bind incorrectly handled the cache size limit. A remote attacker could possibly use this issue to consume memory, leading to a denial of service. (CVE-2023-2828) It was discovere…
first Jun 21, 2023 -
High max 7.5USN-6238-1 5 CVEs
samba vulnerabilities
It was discovered that Samba incorrectly handled Winbind NTLM authentication responses. An attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2022-2127) Andreas Schneider discovered that Samba incorrectly en…
first Jul 19, 2023 -
High max 7.8USN-6166-1 2 CVEs
libcap2 vulnerabilities
David Gstir discovered that libcap2 incorrectly handled certain return codes. An attacker could possibly use this issue to cause libcap2 to consume memory, leading to a denial of service. (CVE-2023-2602) Richard Weinberger discovered that libcap2 incorrectly …
first Jun 14, 2023 -
High max 8.8USN-6268-1 2 CVEs
gst-plugins-base1.0 vulnerabilities
It was discovered that GStreamer Base Plugins incorrectly handled certain FLAC image tags. A remote attacker could use this issue to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-37327) …
first Aug 2, 2023 -
High max 7.5USN-6203-2 1 CVE
python-django vulnerability
USN-6203-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 ESM. Original advisory details: Seokchan Yoon discovered that Django incorrectly handled certain regular expressions. A remote attacker could possibly u…
first Jul 25, 2023 -
High max 7.5USN-6203-1 1 CVE
python-django vulnerability
Seokchan Yoon discovered that Django incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service.
first Jul 5, 2023 -
High max 7.5USN-6157-1 1 CVE
glusterfs vulnerability
Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could possibly use this issue to cause a denial of service.
first Jun 12, 2023 -
High max 8.8USN-6153-1 1 CVE
jupyter-core vulnerability
It was discovered that Jupyter Core executed untrusted files in the current working directory. An attacker could possibly use this issue to execute arbitrary code.
first Jun 12, 2023 -
High max 7.8USN-6137-1 2 CVEs
libraw vulnerabilities
It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of servi…
first Jun 5, 2023 -
High max 8.8USN-6156-1 1 CVE
sssd vulnerability
It was discovered that SSSD incorrrectly sanitized certificate data used in LDAP filters. When using this issue in combination with FreeIPA, a remote attacker could possibly use this issue to escalate privileges.
first Jun 12, 2023