1,181 results · Clear filters · Feed
-
Medium max 5.3USN-3683-1 1 CVE
bind9 vulnerability
Andrew Skalski discovered that Bind could incorrectly enable recursion when the "allow-recursion" setting wasn't specified. This issue could improperly permit recursion to all clients, contrary to expectations.
first Jun 13, 2018 -
Medium max 5.5USN-3619-1 39 CVEs
linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
Jann Horn discovered that the Berkeley Packet Filter (BPF) implementation in the Linux kernel improperly performed sign extension in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary cod…
first Apr 4, 2018 -
Medium max 4.0USN-3606-1 12 CVEs
tiff vulnerabilities
It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute …
first Mar 26, 2018 -
Medium max 5.6USN-3561-1 1 CVE
libvirt update
It was discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. An attacker in the guest could use this to expose sensitive guest informat…
first Feb 7, 2018 -
Medium max 4.8USN-3566-2 5 CVEs
php5 vulnerabilities
USN-3566-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to access sensiti…
first May 22, 2019 -
Medium max 5.6USN-3583-1 25 CVEs
linux vulnerabilities
It was discovered that an out-of-bounds write vulnerability existed in the Flash-Friendly File System (f2fs) in the Linux kernel. An attacker could construct a malicious file system that, when mounted, could cause a denial of service (system crash) or possibl…
first Feb 23, 2018 -
Medium max 5.9USN-3587-1 2 CVEs
dovecot vulnerabilities
It was discovered that Dovecot incorrectly handled parsing certain email addresses. A remote attacker could use this issue to cause Dovecot to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2017-14461) It was discovere…
first Mar 5, 2018 -
Medium max 5.6USN-3582-1 6 CVEs
linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
Mohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-201…
first Feb 22, 2018 -
Medium max 5.6USN-3594-1 1 CVE
linux vulnerability
USN-3542-1 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64 architecture in Ubuntu 14.04 LTS. This update provides the compiler-based retpoline kernel mitigation for the amd64 and i386 architectures. Original advisory details: Jann Horn discovered th…
first Mar 9, 2018 -
Medium max 5.6USN-3542-1 2 CVEs
linux vulnerabilities
Jann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, includ…
first Jan 23, 2018 -
Medium max 4.3USN-3526-1 1 CVE
sssd vulnerability
It was discovered that SSSD incorrectly handled certain inputs when querying its local cache. An attacker could use this to inject arbitrary code and expose sensitive information.
first Jan 10, 2018 -
Medium max 5.5USN-4488-1 4 CVEs
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerabilities
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled the input extension protocol. A local attacker could possibly use this issue to escalate privileges. (CVE-2020-14346) Jan-Niklas Sohn discovered that the X.Org X Server incorrectly initial…
first Sep 2, 2020 -
Medium max 6.5USN-3452-1 4 CVEs
ceph vulnerabilities
It was discovered that Ceph incorrectly handled the handle_command function. A remote authenticated user could use this issue to cause Ceph to crash, resulting in a denial of service. (CVE-2016-5009) Rahul Aggarwal discovered that Ceph incorrectly handled the…
first Oct 11, 2017 -
Medium max 4.4USN-3422-1 18 CVEs
linux vulnerabilities
It was discovered that a buffer overflow existed in the Bluetooth stack of the Linux kernel when handling L2CAP configuration responses. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2017-1000251) It was disc…
first Sep 18, 2017 -
Medium max 5.9USN-3362-1 3 CVEs
xorg-server, xorg-server-hwe-16.04, xorg-server-lts-xenial vulnerabilities
It was discovered that the X.Org X server incorrectly handled endianness conversion of certain X events. An attacker able to connect to an X server, either locally or remotely, could use this issue to crash the server, or possibly execute arbitrary code as an…
first Jul 24, 2017 -
Medium max 6.1USN-3347-1 2 CVEs
libgcrypt11, libgcrypt20 vulnerabilities
Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that Libgcrypt was susceptible to an attack via side channels. A local attacker could use this atta…
first Jul 3, 2017 -
Medium max 4.4USN-3312-1 15 CVEs
linux, linux-aws, linux-gke, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that the netfilter netlink implementation in the Linux kernel did not properly validate batch messages. A local attacker with the CAP_NET_ADMIN capability could use this to expose sensitive information or cause a denial of service. (CVE-2016…
first Jun 7, 2017 -
Medium max 5.3USN-3297-1 4 CVEs
jbig2dec vulnerabilities
Bingchang Liu discovered that jbig2dec incorrectly handled memory when decoding malformed image files. If a user or automated system were tricked into processing a specially crafted JBIG2 image file, a remote attacker could cause jbig2dec to crash, resulting …
first May 24, 2017 -
Medium max 5.5USN-3181-1 6 CVEs
openssl vulnerabilities
Guido Vranken discovered that OpenSSL used undefined behaviour when performing pointer arithmetic. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS and Ubu…
first Jan 31, 2017 -
Medium max 5.3USN-3163-1 3 CVEs
nss vulnerabilities
It was discovered that NSS incorrectly handled certain invalid Diffie-Hellman keys. A remote attacker could possibly use this flaw to cause NSS to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubunt…
first Jan 4, 2017 -
Medium max 6.5USN-3123-1 12 CVEs
curl vulnerabilities
It was discovered that curl incorrectly reused client certificates when built with NSS. A remote attacker could possibly use this issue to hijack the authentication of a TLS connection. (CVE-2016-7141) Nguyen Vu Hoang discovered that curl incorrectly handled …
first Nov 3, 2016 -
Medium max 5.9USN-2653-1 5 CVEs
python2.7, python3.2, python3.4 vulnerabilities
It was discovered that multiple Python protocol libraries incorrectly limited certain data when connecting to servers. A malicious ftp, http, imap, nntp, pop or smtp server could use this issue to cause a denial of service. (CVE-2013-1752) It was discovered t…
first Jun 25, 2015 -
Medium max 4.0USN-2275-1 3 CVEs
dbus vulnerabilities
Alban Crequy discovered that dbus-daemon incorrectly sent AccessDenied errors to the service instead of the client when enforcing permissions. A local user can use this issue to possibly deny access to the service. (CVE-2014-3477) Alban Crequy discovered that…
first Jul 8, 2014 -
Medium max 6.5USN-2278-1 7 CVEs
file vulnerabilities
Mike Frysinger discovered that the file awk script detector used multiple wildcard with unlimited repetitions. An attacker could use this issue to cause file to consume resources, resulting in a denial of service. (CVE-2013-7345) Francisco Alonso discovered t…
first Jul 15, 2014 -
Medium max 6.5USN-2276-1 9 CVEs
php5 vulnerabilities
Francisco Alonso discovered that the PHP Fileinfo component incorrectly handled certain CDF documents. A remote attacker could use this issue to cause PHP to hang or crash, resulting in a denial of service. (CVE-2014-0207, CVE-2014-3478, CVE-2014-3479, CVE-20…
first Jul 9, 2014 -
Medium max 5.5
linux vulnerability
A flaw was discovered in the Linux kernel's pseudo tty (pty) device. An unprivileged user could exploit this flaw to cause a denial of service (system crash) or potentially gain administrator privileges.
first May 6, 2014 -
Medium max 5.6USN-8153-1 2 CVEs
salt vulnerabilities
Zach Malone discovered that Salt did not properly handle permissions to cache data. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2015-8034) Dylan Frese discovered that Salt incorrectly allowed users to specify PAM servi…
first Apr 7, 2026 -
Medium max 4.6USN-7898-1 1 CVE
openvpn vulnerability
Joshua Rogers discovered that OpenVPN incorrectly handled HMAC verification checks. A remote attacker could possibly use this issue to bypass source IP address validation.
first Nov 27, 2025 -
Medium max 4.0USN-7804-1 1 CVE
squid vulnerability
It was discovered that Squid incorrectly handled certain long SNMP OIDs. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service.
first Oct 6, 2025 -
Medium max 4.1USN-7748-1 2 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled file extraction when opening maliciously crafted zip or tar archives. An attacker could possibly use this issue to create or overwrite files on the system and execute arbitrary code.
first Sep 15, 2025 -
Medium max 5.3USN-7599-2 1 CVE
python-pip vulnerability
USN-7599-1 fixed vulnerabilities in python-urllib3. This update provides the corresponding update for python-pip for CVE-2025-50181. Original advisory details: Jacob Sandum discovered that urllib3 handled redirects even when they were explicitly disabled whil…
first Jun 26, 2025 -
Medium max 5.5USN-7499-1 2 CVEs
linux-azure, linux-azure-6.11 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Microsoft Azure Network Adapter (MANA) driver; - Timer subsystem; (CVE-2025-2…
first May 7, 2025 -
Medium max 5.5USN-7493-1 1 CVE
linux-raspi vulnerabilities
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Clock framework and drivers; (CVE-2024-58081)
first May 6, 2025 -
Medium max 6.8USN-7431-1 1 CVE
haproxy vulnerability
Aleandro Prudenzano and Edoardo Geraci discovered that HAProxy incorrectly handled certain uncommon configurations that replace multiple short patterns with a longer one. A remote attacker could use this issue to cause HAProxy to crash, resulting in a denial …
first Apr 10, 2025 -
Medium max 6.1USN-7399-1 1 CVE
rabbitmq-server vulnerability
It was discovered that RabbitMQ Server's management UI did not sanitize certain input. An attacker could possibly use this issue to inject code by performing a cross-site scripting (XSS) attack.
first Mar 31, 2025 -
Medium max 6.5USN-7269-2 3 CVEs
intel-microcode vulnerabilities
USN-7269-1 fixed vulnerabilities in Intel Microcode. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: Ke Sun, Paul Grosen and Alyssa Milburn discovered that some Intel® Processors did not properly implement Finit…
first Feb 24, 2025 -
Medium max 4.2USN-7261-2 1 CVE
vim vulnerability
USN-7261-1 fixed vulnerabilities in Vim. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly …
first Apr 1, 2025 -
Medium max 4.2USN-7261-1 1 CVE
vim vulnerability
It was discovered that Vim incorrectly handled certain internal calls when scrolling a window. An attacker could possibly use this issue to cause a denial of service.
first Feb 10, 2025 -
Medium max 6.9
jquery vulnerabilities
It was discovered that jQuery incorrectly handled parsing untrusted HTML. A remote attacker could possibly use this issue to execute arbitrary code.
first Jan 30, 2025 -
Medium max 5.4USN-7244-1 2 CVEs
jinja2 vulnerabilities
It was discovered that Jinja2 incorrectly handled certain filenames when compiling template content. An attacker could possibly use this issue to execute arbitrary code. (CVE-2024-56201) It was discovered that Jinja2 incorrectly handled string formatting call…
first Jan 30, 2025