1,181 results · Clear filters · Feed
-
Medium max 4.4USN-6833-1 1 CVE
vte2.91 vulnerability
Siddharth Dushantha discovered that VTE incorrectly handled large window resize escape sequences. An attacker could possibly use this issue to consume resources, leading to a denial of service.
first Jun 13, 2024 -
Medium max 6.6USN-6838-1 2 CVEs
ruby2.7, ruby3.0, ruby3.1, ruby3.2 vulnerabilities
It was discovered that Ruby RDoc incorrectly parsed certain YAML files. If a user or automated system were tricked into parsing a specially crafted .rdoc_options file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2024-27281)…
first Jun 17, 2024 -
Medium max 6.4USN-6796-1 2 CVEs
tpm2-tss vulnerabilities
Fergus Dall discovered that TPM2 Software Stack did not properly handle layer arrays. An attacker could possibly use this issue to cause TPM2 Software Stack to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-22745) Jurge…
first May 29, 2024 -
Medium max 6.3USN-6801-1 1 CVE
python-pymysql vulnerability
It was discovered that PyMySQL incorrectly escaped untrusted JSON input. An attacker could possibly use this issue to perform SQL injection attacks.
first May 30, 2024 -
Medium max 5.2USN-6768-1 1 CVE
glib2.0 vulnerability
Alicia Boya García discovered that GLib incorrectly handled signal subscriptions. A local attacker could use this issue to spoof D-Bus signals resulting in a variety of impacts including possible privilege escalation.
first May 9, 2024 -
Medium max 5.3USN-6841-1 1 CVE
php7.4, php8.1, php8.2, php8.3 vulnerability
It was discovered that PHP could early return in the filter_var function resulting in invalid user information being treated as valid user information. An attacker could possibly use this issue to expose raw user input information.
first Jun 19, 2024 -
Medium max 6.5USN-6727-1 3 CVEs
nss vulnerabilities
It was discovered that NSS incorrectly handled padding when checking PKCS#1 certificates. A remote attacker could possibly use this issue to perform Bleichenbacher-like attacks and recover private data. This issue only affected Ubuntu 20.04 LTS. (CVE-2023-442…
first Apr 10, 2024 -
Medium max 6.2USN-6734-2 2 CVEs
libvirt vulnerabilities
USN-6734-1 fixed vulnerabilities in libvirt. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: Alexander Kuznetsov discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this…
first Apr 29, 2024 -
Medium max 6.2USN-6734-1 3 CVEs
libvirt vulnerabilities
Alexander Kuznetsov discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. (CVE-2024-1441) It was discovered that libvirt incorrectly handled certai…
first Apr 15, 2024 -
Medium max 6.3USN-6712-1 1 CVE
libnet-cidr-lite-perl vulnerability
It was discovered that Net::CIDR::Lite incorrectly handled extra zero characters at the beginning of IP address strings. A remote attacker could possibly use this issue to bypass access controls.
first Mar 25, 2024 -
Medium max 5.5USN-6709-1 4 CVEs
openssl1.0 vulnerabilities
It was discovered that checking excessively long DH keys or parameters may be very slow. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service. (CVE-2023-3446) After the fix for CVE-2023-3446 B…
first Mar 21, 2024 -
Medium max 5.3USN-6674-2 1 CVE
python-django vulnerability
USN-6674-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Seokchan Yoon discovered that the Django Truncator function incorrectly handled very long HTML input. A remote attacker …
first Mar 4, 2024 -
Medium max 5.3USN-6674-1 1 CVE
python-django vulnerability
Seokchan Yoon discovered that the Django Truncator function incorrectly handled very long HTML input. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service.
first Mar 4, 2024 -
Medium max 5.3USN-6671-1 1 CVE
php-nyholm-psr7 vulnerability
It was discovered that php-nyholm-psr7 incorrectly parsed HTTP headers. A remote attacker could possibly use this issue to perform an HTTP header injection attack.
first Feb 29, 2024 -
Medium max 5.5USN-6668-1 1 CVE
python-openstackclient vulnerability
It was discovered that when python-openstackclient attempted to delete a non-existing access rule, it would delete another existing access rule instead, contrary to expectations.
first Feb 28, 2024 -
Medium max 5.5USN-6629-2 1 CVE
ujson vulnerability
USN-6629-1 fixed vulnerabilities in UltraJSON. This update provides the corresponding updates for Ubuntu 20.04 LTS. Original advisory details: It was discovered that UltraJSON incorrectly handled certain input with a large amount of indentation. An attacker c…
first Feb 14, 2024 -
Medium max 6.5USN-6615-1 22 CVEs
mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.36 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.10. In addition to security fixes, the updated pa…
first Jan 30, 2024 -
Medium max 6.5USN-6622-1 4 CVEs
openssl vulnerabilities
David Benjamin discovered that OpenSSL incorrectly handled excessively long X9.42 DH keys. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, leading to a denial of service. (CVE-2023-5678) Sverker Eriksson discovered that …
first Feb 5, 2024 -
Medium max 5.9USN-6598-1 1 CVE
paramiko vulnerability
Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk discovered that the SSH protocol was vulnerable to a prefix truncation attack. If a remote attacker was able to intercept SSH communications, extension negotiation messages could be truncated, possibly leading to …
first Jan 25, 2024 -
Medium max 5.9USN-6237-1 2 CVEs
curl vulnerabilities
Hiroki Kurosawa discovered that curl incorrectly handled validating certain certificate wildcards. A remote attacker could possibly use this issue to spoof certain website certificates using IDN hosts. (CVE-2023-28321) Hiroki Kurosawa discovered that curl inc…
first Jul 19, 2023 -
Medium max 5.9USN-6589-1 1 CVE
filezilla vulnerability
Fabian Baeumer, Marcus Brinkmann and Joerg Schwenk discovered that the SSH protocol used in FileZilla is prone to a prefix truncation attack, known as the "Terrapin attack". A remote attacker could use this issue to downgrade or disable some security features…
first Jan 18, 2024 -
Medium max 6.0USN-6556-1 6 CVEs
budgie-extras vulnerabilities
It was discovered that Budgie Extras incorrectly handled certain temporary file paths. An attacker could possibly use this issue to inject false information or deny access to the application. (CVE-2023-49342, CVE-2023-49343, CVE-2023-49347) Matthias Gerstner …
first Dec 14, 2023 -
Medium max 5.4USN-6575-1 2 CVEs
twisted vulnerabilities
It was discovered that Twisted incorrectly escaped host headers in certain 404 responses. A remote attacker could possibly use this issue to perform HTML and script injection attacks. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-3…
first Jan 10, 2024 -
Medium max 5.5USN-6566-2 1 CVE
sqlite3 vulnerability
USN-6566-1 fixed several vulnerabilities in SQLite. This update provides the corresponding fix for CVE-2023-7104 for Ubuntu 18.04 LTS. Original advisory details: It was discovered that SQLite incorrectly handled certain memory operations in the sessions exten…
first Jun 26, 2024 -
Medium max 5.9USN-6561-1 1 CVE
libssh vulnerability
Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk discovered that the SSH protocol was vulnerable to a prefix truncation attack. If a remote attacker was able to intercept SSH communications, extension negotiation messages could be truncated, possibly leading to …
first Dec 19, 2023 -
Medium max 4.9USN-6554-1 1 CVE
gnome-control-center vulnerability
Zygmunt Krynicki discovered that GNOME Settings did not accurately reflect the SSH remote login status when the system was configured to use systemd socket activation for OpenSSH. Remote SSH access may be unknowingly enabled, contrary to expectation.
first Dec 13, 2023 -
Medium max 5.5USN-6630-1 1 CVE
python-glance-store vulnerability
It was discovered that Glance_store incorrectly handled logging when the DEBUG log level is enabled. A local attacker could use this issue to obtain access_key values.
first Feb 12, 2024 -
Medium max 5.3USN-6527-1 2 CVEs
openjdk-17, openjdk-21, openjdk-lts vulnerabilities
Carter Kozak discovered that OpenJDK, when compiling with AVX-512 instruction support enabled, could produce code that resulted in memory corruption in certain situations. An attacker targeting applications built in this way could possibly use this to cause a…
first Nov 29, 2023 -
Medium max 4.9USN-6501-1 1 CVE
rabbitmq-server vulnerability
It was discovered that RabbitMQ incorrectly handled certain HTTP requests. An attacker could possibly use this issue to cause a denial of service.
first Nov 21, 2023 -
Medium max 5.5USN-6486-1 1 CVE
iniparser vulnerability
It was discovered that iniParser incorrectly handled certain files. An attacker could possibly use this issue to cause a crash.
first Nov 20, 2023 -
Medium max 5.3USN-6435-2 2 CVEs
openssl vulnerabilities
USN-6435-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding updates for Ubuntu 20.04 LTS. Original advisory details: It was discovered that OpenSSL incorrectly handled excessively large Diffie-Hellman parameters. An attacker could poss…
first Oct 25, 2023 -
Medium max 6.5USN-6459-1 14 CVEs
mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.35 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 23.04, and Ubuntu 23.10. In addition to security fixes, …
first Oct 30, 2023 -
Medium max 5.9USN-6414-1 1 CVE
python-django vulnerability
Wenchao Li discovered that the Django Truncator function incorrectly handled very long HTML input. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service.
first Oct 4, 2023 -
Medium max 5.9USN-6414-2 2 CVEs
python-django vulnerabilities
USN-6414-1 and USN-6378-1 fixed CVE-2023-43665 and CVE-2023-41164 in Django, respectively. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Wenchao Li discovered that the Django Truncator function incorrectly hand…
first Oct 4, 2023 -
Medium max 5.3USN-6378-1 1 CVE
python-django vulnerability
It was discovered that Django incorrectly handled certain URIs with a very large number of Unicode characters. A remote attacker could possibly use this issue to cause Django to consume resources or crash, leading to a denial of service.
first Sep 18, 2023 -
Medium max 5.5USN-6126-1 2 CVEs
libvirt vulnerabilities
It was discovered that libvirt incorrectly handled the nwfilter driver. A local attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-0897) It was discovered th…
first May 31, 2023 -
Medium max 5.5USN-6200-2 2 CVEs
imagemagick vulnerabilities
USN-6200-1 fixed vulnerabilities in ImageMagick. Unfortunately these fixes were incomplete for Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. This update fixes the problem. Original advisory details: It was discovered that ImageMagick incorrectly handled the "-authe…
first Jul 25, 2024 -
Medium max 5.9USN-6288-1 11 CVEs
mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.34 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. In addition to security fixes, the updated pa…
first Aug 15, 2023 -
Medium max 6.5USN-6119-1 2 CVEs
openssl, openssl1.0 vulnerabilities
Matt Caswell discovered that OpenSSL incorrectly handled certain ASN.1 object identifiers. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service. (CVE-2023-2650) Anton Romanov discovered that O…
first May 30, 2023 -
Medium max 5.3USN-6078-1 1 CVE
libwebp vulnerability
Irvan Kurniawan discovered that libwebp incorrectly handled certain memory operations. If a user or automated system were tricked into opening a specially crafted image file, a remote attacker could use this issue to cause libwebp to crash, resulting in a den…
first May 16, 2023