1,181 results · Clear filters · Feed
-
Medium max 5.5USN-6625-2 4 CVEs
linux-gcp, linux-gcp-5.4 vulnerabilities
Marek Marczykowski-Górecki discovered that the Xen event channel infrastructure implementation in the Linux kernel contained a race condition. An attacker in a guest VM could possibly use this to cause a denial of service (paravirtualized device unavailabilit…
first Feb 8, 2024 -
Medium max 5.5USN-6922-2 4 CVEs
linux-lowlatency-hwe-6.5 vulnerabilities
It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CV…
first Aug 1, 2024 -
Medium max 5.5USN-6922-1 4 CVEs
linux-nvidia-6.5 vulnerabilities
It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel when modifying certain settings values through debugfs. A privileged local attacker could use this to cause a denial of service. (CVE-2024-24857, CVE-2024-24858, CV…
first Jul 29, 2024 -
Medium max 5.5USN-6625-1 4 CVEs
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities
Marek Marczykowski-Górecki discovered that the Xen event channel infrastructure implementation in the Linux kernel contained a race condition. An attacker in a guest VM could possibly use this to cause a denial of service (paravirtualized device unavailabilit…
first Feb 7, 2024 -
Medium max 6.2USN-6650-1 1 CVE
inux-oem-6.1 vulnerability
Zhenghan Wang discovered that the generic ID allocator implementation in the Linux kernel did not properly check for null bitmap when releasing IDs. A local attacker could use this to cause a denial of service (system crash).
first Feb 23, 2024 -
Medium max 5.5USN-6646-1 3 CVEs
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
It was discovered that a race condition existed in the ATM (Asynchronous Transfer Mode) subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute a…
first Feb 20, 2024 -
Medium max 6.5USN-6417-1 6 CVEs
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities
It was discovered that the eBPF implementation in the Linux kernel contained a race condition around read-only maps. A privileged attacker could use this to modify read-only maps. (CVE-2021-4001) It was discovered that the IPv6 implementation in the Linux ker…
first Oct 4, 2023 -
Medium max 4.7USN-6056-1 1 CVE
linux-oem-6.1 vulnerability
It was discovered that a race condition existed in the Xen transport layer implementation for the 9P file system protocol in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (guest crash…
first May 5, 2023 -
Medium max 5.5USN-5727-1 7 CVEs
linux, linux-aws, linux-aws-hwe, linux-dell300x, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that a race condition existed in the instruction emulator of the Linux kernel on Arm 64-bit systems. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-20422) It was discovered that the KVM implementation …
first Nov 16, 2022 -
Medium max 5.5USN-5727-2 7 CVEs
linux-gcp, linux-gcp-4.15 vulnerabilities
It was discovered that a race condition existed in the instruction emulator of the Linux kernel on Arm 64-bit systems. A local attacker could use this to cause a denial of service (system crash). (CVE-2022-20422) It was discovered that the KVM implementation …
first Nov 18, 2022 -
Medium max 6.5USN-8950-1 1 CVE
poppler vulnerability
It was discovered that poppler incorrectly handled the password length limit when decrypting certain encrypted PDF files. An attacker could possibly use this issue to cause a denial of service.
first Oct 21, 2026 -
Medium max 6.5USN-8937-1 9 CVEs
openssh, openssh-gssapi vulnerabilities
It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controlling the server could possibly use this issue to write files to unintended locations. (CVE-2026-106552) I…
-
Medium max 6.5USN-8928-1 9 CVEs
openssh vulnerabilities
It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controlling the server could possibly use this issue to write files to unintended locations. (CVE-2026-106552) I…
first Oct 14, 2026 -
Medium max 5.3USN-5239-1 1 CVE
httpcomponents-client vulnerability
It was discovered that HttpClient mishandled certain input. An attacker could use this vulnerability to cause a crash or possibly execute arbitrary code.
first Aug 8, 2022 -
Medium max 6.9USN-8910-1 6 CVEs
libxml2 vulnerabilities
Yirou Yang discovered that libxml2 incorrectly handled certain XML catalogs. If a user or automated system was tricked into processing a specially crafted XML catalog, an attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial …
first Oct 8, 2026 -
Medium max 6.5USN-8907-1 1 CVE
libgit2 vulnerability
It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a CA-trusted certificate could possibly use this issue to perform a machine-in-the-middle attack, leading to the ex…
first Oct 8, 2026 -
Medium max 5.5USN-4428-1 4 CVEs
python2.7, python3.4, python3.5, python3.6, python3.8 vulnerabilities
It was discovered that Python documentation had a misleading information. A security issue could be possibly caused by wrong assumptions of this information. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (…
first Jul 22, 2020 -
Medium max 6.5USN-5095-1 1 CVE
commons-io vulnerability
It was discovered that Apache Commons IO incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information.
first Sep 29, 2021 -
Medium max 6.5USN-4333-1 2 CVEs
python2.7, python3.4, python3.5, python3.6, python3.7 vulnerabilities
It was discovered that Python incorrectly stripped certain characters from requests. A remote attacker could use this issue to perform CRLF injection. (CVE-2019-18348) It was discovered that Python incorrectly handled certain HTTP requests. An attacker could …
first Apr 21, 2020 -
Medium max 6.1USN-4151-1 2 CVEs
python2.7, python3.5, python3.6, python3.7 vulnerabilities
It was discovered that Python incorrectly parsed certain email addresses. A remote attacker could possibly use this issue to trick Python applications into accepting email addresses that should be denied. (CVE-2019-16056) It was discovered that the Python doc…
first Oct 9, 2019 -
Medium max 6.5USN-4333-2 2 CVEs
python3.8 vulnerabilities
USN-4333-1 fixed vulnerabilities in Python. This update provides the corresponding update for Ubuntu 20.04 LTS. Original advisory details: It was discovered that Python incorrectly stripped certain characters from requests. A remote attacker could use this is…
first Apr 30, 2020 -
Medium max 6.1USN-4151-2 2 CVEs
python2.7, python3.4 vulnerabilities
USN-4151-1 fixed several vulnerabilities in Python. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Python incorrectly parsed certain email addresses. A remote attacker…
first Oct 10, 2019 -
Medium max 6.3USN-8894-1 5 CVEs
poppler vulnerabilities
It was discovered that Poppler had an integer overflow in FoFiTrueType::cvtSfnts. An attacker could possibly use this issue to cause Poppler to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-102620) It was discovered that Popple…
first Oct 7, 2026 -
Medium max 5.7USN-8892-1 1 CVE
wsl-pro-service vulnerability
Darshan U discovered that Ubuntu Pro for WSL exposed the attach token in command-line arguments when enabling a subscription on a WSL instance. An attacker could possibly use this issue to obtain sensitive information and gain unauthorized access to Ubuntu Pr…
first Oct 6, 2026 -
Medium max 5.5USN-8881-1 1 CVE
freetype vulnerability
It was discovered that FreeType had a flaw in its CID font loader. An attacker could possibly use this issue to cause FreeType to consume excessive memory and CPU resources, leading to a denial of service.
-
Medium max 6.9USN-8872-1 2 CVEs
libxmltok vulnerabilities
It was discovered that Expat, contained with the xmltok library did not correctly handle certain integer arithmetic. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly cause a denial of service. (CVE-2…
first Oct 5, 2026 -
Medium max 6.6USN-8863-1 4 CVEs
gst-plugins-good1.0 vulnerabilities
Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio streams. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-17072) Seonwook Kim discovered that GStreamer Good Plugins incorrectly p…
first Oct 1, 2026 -
Medium max 5.5USN-8862-1 1 CVE
libxpm vulnerability
It was discovered that libXpm did not correctly handle XPM images with zero-dimension values. A local attacker could possibly use this issue to cause libXpm to use excessive resources, leading to a denial of service.
first Oct 1, 2026 -
Medium max 6.5USN-8857-1 1 CVE
kf6-kcoreaddons vulnerability
It was discovered that KCoreAddons incorrectly handled shell argument quoting in KShell::quoteArgs. The parsing did not adequately handle shell metacharacters, which could lead to a shell escape. An attacker could possibly use this issue to execute arbitrary …
first Oct 1, 2026 -
Medium max 6.5USN-8856-1 1 CVE
kdenlive, mlt vulnerability
It was discovered that Kdenlive allowed dangerous proxy parameters when processing attacker-controlled project files. An attacker could use this to execute arbitrary commands via the MLT framework's ante/post consumer properties.
first Sep 30, 2026 -
Medium max 5.9USN-8832-1 1 CVE
booth vulnerability
It was discovered that Booth did not properly validate message authentication codes under certain circumstances. A remote attacker could possibly use this issue to bypass authentication.
-
Medium max 6.1USN-8835-1 1 CVE
emacs vulnerability
It was discovered that Emacs improperly handled specially crafted SVG images, resulting in memory corruption. An attacker could possibly use this issue to cause Emacs to crash, resulting in a denial of service, or obtain sensitive information.
-
Medium max 4.3USN-8826-1 2 CVEs
lxc vulnerabilities
Maher Azzouzi discovered that LXC did not correctly handle logging certain failure messages. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 L…
-
Medium max 4.4USN-8825-1 1 CVE
requests vulnerability
It was discovered that Requests did not correctly handle generating random temporary file paths. An attacker could possibly use this issue to execute arbitrary code.
-
Medium max 6.5USN-8805-1 1 CVE
moodle vulnerability
It was discovered that Moodle did not properly restrict URLs. An authenticated user could possibly use this issue to perform a server-side request forgery attack and expose sensitive information.
first Sep 23, 2026 -
Medium max 6.2USN-8810-1 7 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 2…
-
Medium max 6.9USN-8733-2 2 CVEs
gzip vulnerabilities
USN-8733-1 fixed vulnerabilities in Gzip. This update provides the corresponding fix for Gzip on Ubuntu 14.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe utilit…
first Sep 22, 2026 -
Medium max 6.5USN-8804-1 10 CVEs
openssh vulnerabilities
Florian Kohnhäuser discovered that OpenSSH incorrectly handled shell metacharacters in certain usernames. An attacker could possibly use this issue to execute arbitrary commands when certain non-default configurations were used, resulting in arbitrary code ex…
-
Medium max 6.8USN-8796-1 3 CVEs
openjdk-21 vulnerabilities
Kai Aizen discovered that the Networking component of OpenJDK 21 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2026-61308) It was discovered that the JSSE component of OpenJDK…
first Sep 21, 2026 -
Medium max 6.8USN-8795-1 3 CVEs
openjdk-17 vulnerabilities
Kai Aizen discovered that the Networking component of OpenJDK 17 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2026-61308) It was discovered that the JSSE component of OpenJDK…
first Sep 21, 2026