1,181 results · Clear filters · Feed
-
Medium max 5.6USN-7716-1 3 CVEs
gst-plugins-base1.0 vulnerabilities
Shaun Mirani discovered that GStreamer Base Plugins incorrectly handled certain malformed media files. An attacker could use these issues to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Aug 26, 2025 -
Medium max 6.9USN-7637-1 4 CVEs
jpeg-xl vulnerabilities
It was discovered that libjxl did not perform proper bounds checking when parsing Exif tags. An attacker could possibly use this issue to cause libjxl to crash, resulting in a denial of service. (CVE-2023-0645) It was discovered that libjxl did not perform pr…
first Jul 14, 2025 -
Medium max 5.6USN-7634-1 2 CVEs
glibc vulnerabilities
It was discovered that the GNU C Library incorrectly handled the strcmp implementation optimized for Power10 processors. This could cause applications to crash, compute wrong results, or leak confidential information. (CVE-2025-5702) It was discovered that th…
first Jul 14, 2025 -
Medium max 6.5USN-7624-1 1 CVE
freerdp3 vulnerability
It was discovered that FreeRDP incorrectly handled certain RDP packets. A remote attacker could possibly use this issue to cause FreeRDP to crash, resulting in a denial of service.
first Jul 8, 2025 -
Medium max 5.5USN-7675-1 1 CVE
poppler vulnerability
Kevin Backhouse discovered that poppler incorrectly handled documents with a large number of annotations. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could use this issue to cause poppler to consume …
first Jul 28, 2025 -
Medium max 5.9USN-7617-1 1 CVE
libtpms vulnerability
It was discovered that libtpms did not properly manage memory when performing crafted cryptographic operations. An attacker could possibly use this issue to cause a denial of service.
first Jul 3, 2025 -
Medium max 4.7USN-7559-1 1 CVE
systemd vulnerability
Qualys discovered that systemd incorrectly handled metadata when processing application crashes. An attacker could possibly use this issue to expose sensitive information.
first Jun 9, 2025 -
Medium max 6.1USN-7508-1 1 CVE
open-vm-tools vulnerability
It was discovered that Open VM Tools incorrectly handled certain file operations. An attacker in a guest could use this issue to perform insecure file operations and possibly elevate privileges in the guest.
first May 13, 2025 -
Medium max 5.6USN-7467-1 2 CVEs
libxml2 vulnerabilities
It was discovered that the libxml2 Python bindings incorrectly handled certain return values. An attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service. (CVE-2025-32414) It was discovered that libxml2 incorrectly ha…
first Apr 28, 2025 -
Medium max 4.3USN-7471-1 1 CVE
poppler vulnerabilities
It was discovered that poppler did not properly verify adbe.pkcs7.sha1 signatures in PDF documents. An attacker could possibly use this issue to create documents with forged signatures that are treated as legitimately signed.
first Apr 29, 2025 -
Medium max 4.5USN-7473-1 1 CVE
ghostscript vulnerability
It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly bypass file path validation.
first May 1, 2025 -
Medium max 4.0USN-7454-1 2 CVEs
libarchive vulnerabilities
It was discovered that the libarchive bsdunzip utility incorrectly handled certain ZIP archive files. If a user or automated system were tricked into processing a specially crafted ZIP archive, an attacker could use this issue to cause libarchive to crash, re…
first Apr 23, 2025 -
Medium max 4.0USN-7426-1 2 CVEs
poppler vulnerabilities
It was discovered that poppler incorrectly handled memory when opening certain PDF files. An attacker could possibly use this issue to cause poppler to crash, resulting in a denial of service.
first Apr 8, 2025 -
Medium max 5.6USN-7423-1 5 CVEs
binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash, expose sensitive information or execute arbitrary code. (CVE-2025-1153, CVE-2025-1182) It was discovered that ld in GNU binutil…
first Apr 7, 2025 -
Medium max 5.3USN-7369-1 5 CVEs
elfutils vulnerabilities
It was discovered that readelf from elfutils could be made to read out of bounds. If a user or automated system were tricked into running readelf on a specially crafted file, an attacker could cause readelf to crash, resulting in a denial of service. This iss…
first Mar 24, 2025 -
Medium max 6.5USN-7317-1 3 CVEs
wpa vulnerabilities
George Chatzisofroniou and Panayiotis Kotzanikolaou discovered that wpa_supplicant and hostapd reused encryption elements in the PKEX protocol. An attacker could possibly use this issue to impersonate a wireless access point, and obtain sensitive information.…
first Mar 3, 2025 -
Medium max 5.5USN-7306-1 2 CVEs
binutils vulnerabilities
It was discovered that GNU binutils in nm tool is affected by an incorrect access control. An attacker could possibly use this issue to cause a crash. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2024-57360) It was disco…
first Feb 26, 2025 -
Medium max 5.3USN-7273-1 2 CVEs
libsndfile vulnerabilities
It was discovered that libsndfile incorrectly handled memory when executing its FLAC codec. If a user or automated system were tricked into processing a specially crafted sound file, an attacker could possibly use this issue to cause a denial of service or ob…
first Feb 18, 2025 -
Medium max 5.3USN-7229-1 1 CVE
clamav vulnerability
It was discovered that ClamAV incorrectly handled decrypting OLE2 content. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service.
first Jan 27, 2025 -
Medium max 6.7USN-7228-1 2 CVEs
libreoffice vulnerabilities
Thomas Rinsma discovered that LibreOffice incorrectly handled paths when processing embedded font files. If a user or automated system were tricked into opening a specially crafted LibreOffice file, a remote attacker could possibly use this issue to create ar…
first Jan 27, 2025 -
Medium max 5.3USN-7267-2 1 CVE
libsndfile vulnerability
USN-7267-1 fixed a vulnerability in libsndfile. This update provides the corresponding updates for Ubuntu 24.04 LTS and Ubuntu 24.10. Original advisory details: It was discovered that libsndfile incorrectly handled certain malformed OggVorbis files. An attack…
first Feb 25, 2025 -
Medium max 5.9USN-7104-1 1 CVE
curl vulnerability
It was discovered that curl could overwrite the HSTS expiry of the parent domain with the subdomain's HSTS entry. This could lead to curl switching back to insecure HTTP earlier than otherwise intended, resulting in information exposure.
first Nov 18, 2024 -
Medium max 5.4USN-7113-1 2 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Nov 18, 2024 -
Medium max 6.5USN-7079-1 2 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Oct 22, 2024 -
Medium max 5.3USN-7043-2 1 CVE
cups-filters vulnerability
USN-7043-1 fixed a vulnerability in cups-filters. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Simone Margaritelli discovered that the cups-filters cups-browsed component could be used to create arbitrary prin…
first Oct 1, 2024 -
Medium max 4.7USN-7014-1 1 CVE
nginx vulnerability
It was discovered that the nginx ngx_http_mp4 module incorrectly handled certain malformed mp4 files. In environments where the mp4 directive is in use, a remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service.
first Sep 16, 2024 -
Medium max 5.3USN-6858-1 5 CVEs
espeak-ng vulnerabilities
It was discovered that eSpeak NG did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. (CVE-2023-49990, CVE-2023-49991, CVE-2023-49992, CVE-2023-49993, CV…
first Jul 1, 2024 -
Medium max 5.9USN-6814-1 1 CVE
libvpx vulnerability
Xiantong Hou discovered that libvpx did not properly handle certain malformed media files. If an application using libvpx opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.
first Jun 6, 2024 -
Medium max 6.2USN-6763-1 1 CVE
libvirt vulnerability
Martin Širokov discovered that libvirt incorrectly handled certain memory operations. A local attacker could possibly use this issue to access virtproxyd without authorization.
first May 7, 2024 -
Medium max 6.5USN-6789-1 1 CVE
libreoffice vulnerability
Amel Bouziane-Leblond discovered that LibreOffice incorrectly handled graphic on-click bindings. If a user were tricked into clicking a graphic in a specially crafted document, a remote attacker could possibly run arbitrary script.
first May 28, 2024 -
Medium max 5.3USN-6754-2 1 CVE
nghttp2 vulnerability
USN-6754-1 fixed vulnerabilities in nghttp2. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: It was discovered that nghttp2 incorrectly handled the HTTP/2 implementation. A remote attacker could possibly use this…
first May 7, 2024 -
Medium max 5.3USN-6733-2 2 CVEs
gnutls28 vulnerabilities
USN-6733-1 fixed vulnerabilities in GnuTLS. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that GnuTLS had a timing side-channel when performing certain ECDSA operations. A remote attacker cou…
first Apr 29, 2024 -
Medium max 5.3USN-6733-1 2 CVEs
gnutls28 vulnerabilities
It was discovered that GnuTLS had a timing side-channel when performing certain ECDSA operations. A remote attacker could possibly use this issue to recover sensitive information. (CVE-2024-28834) It was discovered that GnuTLS incorrectly handled verifying ce…
first Apr 15, 2024 -
Medium max 5.5USN-6588-1 1 CVE
pam vulnerability
Matthias Gerstner discovered that the PAM pam_namespace module incorrectly handled special files when performing directory checks. A local attacker could possibly use this issue to cause PAM to stop responding, resulting in a denial of service.
first Jan 17, 2024 -
Medium max 4.8USN-6592-1 2 CVEs
libssh vulnerabilities
It was discovered that libssh incorrectly handled the ProxyCommand and the ProxyJump features. A remote attacker could possibly use this issue to inject malicious code into the command of the features mentioned through the hostname parameter. (CVE-2023-6004) …
first Jan 22, 2024 -
Medium max 6.5USN-6535-1 2 CVEs
curl vulnerabilities
Harry Sintonen discovered that curl incorrectly handled mixed case cookie domains. A remote attacker could possibly use this issue to set cookies that get sent to different and unrelated sites and domains. (CVE-2023-46218) Maksymilian Arciemowicz discovered t…
first Dec 6, 2023 -
Medium max 5.3USN-6522-1 3 CVEs
freerdp2 vulnerabilities
It was discovered that FreeRDP incorrectly handled drive redirection. If a user were tricked into connection to a malicious server, a remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly obtain sensitiv…
first Nov 29, 2023 -
Medium max 5.3USN-6522-2 3 CVEs
freerdp2 vulnerabilities
USN-6522-1 fixed several vulnerabilities in FreeRDP. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: It was discovered that FreeRDP incorrectly handled drive redirection. If a user were tricked into connection to…
first Dec 7, 2023 -
Medium max 5.9USN-6499-1 1 CVE
gnutls28 vulnerability
It was discovered that GnuTLS had a timing side-channel when handling certain RSA-PSK key exchanges. A remote attacker could possibly use this issue to recover sensitive information.
first Nov 21, 2023 -
Medium max 5.9USN-6499-2 1 CVE
gnutls28 vulnerability
USN-6499-1 fixed vulnerabilities in GnuTLS. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: It was discovered that GnuTLS had a timing side-channel when handling certain RSA-PSK key exchanges. A remote attacker c…
first Jan 8, 2024