Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

All Critical High Medium Low With exploited CVEs

1,181 results · Clear filters · Feed

  • Medium max 6.5
    USN-6401-1 10 CVEs

    freerdp2 vulnerabilities

    It was discovered that FreeRDP did not properly manage certain inputs. A malicious server could use this issue to cause FreeRDP clients to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2023-39350, CVE-2023-39351, CVE-…

    first Oct 4, 2023
  • Medium max 5.5
    USN-6258-1 4 CVEs

    llvm-toolchain-13, llvm-toolchain-14, llvm-toolchain-15 vulnerabilities

    It was discovered that LLVM Toolchain did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted MLIR file, an attacker could possibly use this issue to cause LLVM Toolchain to crash, resulting in a den…

    first Jul 27, 2023
  • Medium max 5.5
    USN-6273-1 2 CVEs

    poppler vulnerabilities

    Jieyong Ma discovered that poppler incorrectly handled certain malformed PDF files. A remote attacker could possibly use this issue to cause poppler to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (C…

    first Aug 3, 2023
  • Medium max 5.3
    USN-6184-1 1 CVE

    cups vulnerability

    It was discovered that CUPS incorrectly handled certain memory operations. An attacker could possibly use this issue to cause CUPS to crash, resulting in a denial of service, or possibly obtain sensitive information.

    first Jun 22, 2023
  • Medium max 5.5
    USN-6165-1 7 CVEs

    glib2.0 vulnerabilities

    It was discovered that GLib incorrectly handled non-normal GVariants. An attacker could use this issue to cause GLib to crash, resulting in a denial of service, or perform other unknown attacks.

    first Jun 14, 2023
  • Medium max 6.5
    USN-6063-1 4 CVEs

    ceph vulnerabilities

    Mark Kirkwood discovered that Ceph incorrectly handled certain key lengths. An attacker could possibly use this issue to create non-random encryption keys. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-3979) It was discovered that …

    first May 9, 2023
  • Medium max 5.5
    USN-6129-1 1 CVE

    avahi vulnerability

    It was discovered that Avahi incorrectly handled certain DBus messages. A local attacker could possibly use this issue to cause Avahi to crash, resulting in a denial of service.

    first Jun 1, 2023
  • Medium max 5.1
    USN-8058-1 3 CVEs

    rlottie vulnerabilities

    It was discovered that rlottie did not properly handle certain inputs. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code.

    first Feb 24, 2026
  • Medium max 5.5
    USN-5933-1 2 CVEs

    libtpms vulnerabilities

    Francisco Falcon discovered that Libtpms did not properly manage memory when performing certain cryptographic operations. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2023-1017, CVE-2023-1018…

    first Mar 7, 2023
  • Medium max 6.5
    USN-5795-1 2 CVEs

    net-snmp vulnerabilities

    It was discovered that Net-SNMP incorrectly handled certain requests. A remote attacker could possibly use these issues to cause Net-SNMP to crash, resulting in a denial of service.

    first Jan 9, 2023
  • Medium max 4.6
    USN-5741-1 1 CVE

    exim4 vulnerability

    It was discovered that Exim incorrectly handled certain regular expressions. An attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code.

    first Nov 24, 2022
  • Medium max 6.3
    USN-5743-2 1 CVE

    tiff vulnerability

    USN-5743-1 fixed a vulnerability in LibTIFF. This update provides the corresponding updates for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. Original advisory details: It was discovered that LibTIFF incorrectly handled certain malfor…

    first Dec 1, 2022
  • Medium max 6.5
    USN-5658-1 2 CVEs

    isc-dhcp vulnerabilities

    It was discovered that DHCP incorrectly handled option reference counting. A remote attacker could possibly use this issue to cause DHCP servers to crash, resulting in a denial of service. (CVE-2022-2928) It was discovered that DHCP incorrectly handled certai…

    first Oct 5, 2022
  • Medium max 6.6
    USN-5614-1 1 CVE

    wayland vulnerability

    It was discovered that Wayland incorrectly handled reference counting certain objects. An attacker could use this issue to cause Wayland to crash, resulting in a denial of service, or possibly execute arbitrary code.

    first Sep 15, 2022
  • Medium max 6.5
    USN-5543-1 6 CVEs

    net-snmp vulnerabilities

    Yu Zhang and Nanyu Zhong discovered that Net-SNMP incorrectly handled memory operations when processing certain requests. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service, or possibly execute arbitrary code.

    first Aug 1, 2022
  • Medium max 6.7
    USN-5463-1 8 CVEs

    ntfs-3g vulnerabilities

    It was discovered that NTFS-3G incorrectly handled the ntfsck tool. If a user or automated system were tricked into using ntfsck on a specially crafted disk image, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2021-46790) Rom…

    first Jun 7, 2022
  • Medium max 5.5
    USN-5439-1 1 CVE

    accountsservice vulnerability

    Gunnar Hjalmarsson discovered that AccountsService incorrectly dropped privileges. A local user could possibly use this issue to cause AccountsService to crash or stop responding, resulting in a denial of service. (CVE-2022-1804)

    first May 24, 2022
  • Medium max 5.7
    USN-5342-3 1 CVE

    python3.7 vulnerability

    USN-5342-1 fixed several vulnerabilities in Python. This update provides the corresponding fix for CVE-2021-3426 for Ubuntu 18.04 ESM. Original advisory details: David Schwörer discovered that Python incorrectly handled certain inputs. An attacker could possi…

    first May 23, 2022
  • Medium max 6.8
    USN-5332-1 2 CVEs

    bind9 vulnerabilities

    Xiang Li, Baojun Liu, Chaoyi Lu, and Changgen Zou discovered that Bind incorrectly handled certain bogus NS records when using forwarders. A remote attacker could possibly use this issue to manipulate cache results. (CVE-2021-25220) It was discovered that Bin…

    first Mar 17, 2022
  • Medium max 5.5
    USN-5279-1 2 CVEs

    util-linux vulnerabilities

    It was discovered that util-linux incorrectly handled unmounting FUSE filesystems. A local attacker could possibly use this issue to unmount FUSE filesystems belonging to other users.

    first Feb 9, 2022
  • Medium max 6.2
    USN-5184-1 1 CVE

    libmysofa vulnerability

    It was discovered that libmysofa mishandled certain input. An attacker could use this vulnerability to cause a denial of service (crash).

    first Dec 8, 2021
  • Medium max 5.3
    USN-5126-1 1 CVE

    bind9 vulnerability

    Kishore Kumar Kothapalli discovered that Bind incorrectly handled the lame cache when processing responses. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service.

    first Oct 28, 2021
  • Medium max 4.7
    USN-5043-2 1 CVE

    exiv2 regression

    USN-5043-1 fixed vulnerabilities in Exiv2. The update introduced a new regression that could cause a crash in applications using libexiv2. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Exi…

    first Jan 11, 2022
  • Medium max 4.7
    USN-4990-1 2 CVEs

    nettle vulnerabilities

    It was discovered that Nettle incorrectly handled RSA decryption. A remote attacker could possibly use this issue to cause Nettle to crash, resulting in a denial of service. (CVE-2021-3580) It was discovered that Nettle incorrectly handled certain padding ora…

    first Jun 17, 2021
  • Medium max 5.3
    USN-5006-1 5 CVEs

    php7.2, php7.4 vulnerabilities

    It was discovered that PHP incorrectly handled certain PHAR files. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 18.04 LTS and…

    first Jul 7, 2021
  • Medium max 5.3
    USN-4898-1 2 CVEs

    curl vulnerabilities

    Viktor Szakats discovered that curl did not strip off user credentials from referrer header fields. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2021-22876) Mingtao Yang discovered that curl incorrectly handled session…

    first Mar 31, 2021
  • Medium max 5.3
    USN-4903-1 1 CVE

    curl vulnerability

    Viktor Szakats discovered that curl did not strip off user credentials from referrer header fields. A remote attacker could possibly use this issue to obtain sensitive information.

    first Apr 7, 2021
  • Medium max 5.7
    USN-4667-2 1 CVE

    apt vulnerability

    USN-4667-1 fixed a vulnerability in APT. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Kevin Backhouse discovered that APT incorrectly handled certain packages. A local attacker could possibly use this issue to…

    first Jan 11, 2021
  • Medium max 5.7
    USN-4667-1 1 CVE

    apt vulnerability

    Kevin Backhouse discovered that APT incorrectly handled certain packages. A local attacker could possibly use this issue to cause APT to crash or stop responding, resulting in a denial of service.

    first Dec 9, 2020
  • Medium max 4.4
    USN-4640-1 1 CVE

    pulseaudio vulnerability

    James Henstridge discovered that an Ubuntu-specific patch caused PulseAudio to incorrectly handle snap client connections. An attacker could possibly use this to expose sensitive information.

    first Nov 23, 2020
  • Medium max 5.5
    USN-4611-1 3 CVEs

    samba vulnerabilities

    Steven French discovered that Samba incorrectly handled ChangeNotify permissions. A remote attacker could possibly use this issue to obtain file name information. (CVE-2020-14318) Bas Alberts discovered that Samba incorrectly handled certain winbind requests.…

    first Nov 2, 2020
  • Medium max 5.3
    USN-4568-1 1 CVE

    brotli vulnerability

    It was discovered that Brotli incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash.

    first Oct 5, 2020
  • Medium max 5.4
    USN-4583-1 2 CVEs

    php5, php7.0, php7.2, php7.4 vulnerabilities

    It was discovered that PHP incorrectly handled certain encrypt ciphers. An attacker could possibly use this issue to decrease security or cause incorrect encryption data. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-7069) It was d…

    first Oct 14, 2020
  • Medium max 5.8
    USN-4528-1 3 CVEs

    ceph vulnerabilities

    Adam Mohammed discovered that Ceph incorrectly handled certain CORS ExposeHeader tags. A remote attacker could possibly use this issue to preform an HTTP header injection attack. (CVE-2020-10753) Lei Cao discovered that Ceph incorrectly handled certain POST r…

    first Sep 22, 2020
  • Medium max 5.5
    USN-4559-1 1 CVE 1 exploited

    samba update

    Tom Tervoort discovered that the Netlogon protocol implemented by Samba incorrectly handled the authentication scheme. A remote attacker could use this issue to forge an authentication token and steal the credentials of the domain admin. While a previous secu…

    first Sep 30, 2020
  • Medium max 5.5
    USN-4510-1 1 CVE 1 exploited

    samba vulnerability

    Tom Tervoort discovered that the Netlogon protocol implemented by Samba incorrectly handled the authentication scheme. A remote attacker could use this issue to forge an authentication token and steal the credentials of the domain admin. This update fixes the…

    first Sep 17, 2020
  • Medium max 6.5
    USN-4468-2 1 CVE

    bind9 vulnerability

    USN-4468-1 fixed a vulnerability in Bind. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Dave Feldman, Jeff Warren, and Joel Cunningham discovered that Bind incorrectly handled certain trunc…

    first Aug 24, 2020
  • Medium max 5.3
    USN-4519-1 1 CVE

    pulseaudio vulnerability

    Ratchanan Srirattanamet discovered that an Ubuntu-specific patch caused PulseAudio to incorrectly handle memory under certain error conditions in the Bluez 5 module. An attacker could use this issue to cause PulseAudio to crash, resulting in a denial of servi…

    first Sep 17, 2020
  • Medium max 5.5
    USN-4488-2 5 CVEs

    xorg-server vulnerabilities

    USN-4488-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update and also the update from USN-4490-1 for Ubuntu 14.04 ESM. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled the in…

    first Sep 9, 2020
  • Medium max 5.5
    USN-4510-2 1 CVE 1 exploited

    samba vulnerability

    USN-4510-1 fixed a vulnerability in Samba. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Tom Tervoort discovered that the Netlogon protocol implemented by Samba incorrectly handled the authentication scheme. A …

    first Sep 17, 2020