1,181 results · Clear filters · Feed
-
Medium max 6.5USN-5447-1 1 CVE
logrotate vulnerability
It was discovered that logrotate incorrectly handled the state file. A local attacker could possibly use this issue to keep a lock on the state file and cause logrotate to stop working, leading to a denial of service.
first May 26, 2022 -
Medium max 5.5USN-5395-1 2 CVEs
networkd-dispatcher vulnerabilities
It was discovered that networkd-dispatcher incorrectly handled internal scripts. A local attacker could possibly use this issue to cause a race condition, escalate privileges and execute arbitrary code. (CVE-2022-29799, CVE-2022-29800)
first Apr 28, 2022 -
Medium max 6.0USN-5376-2 1 CVE
git vulnerability
USN-5376-1 fixed vulnerabilities in Git. This update provides the corresponding updates for Ubuntu 22.04 LTS. Original advisory details: 俞晨东 discovered that Git incorrectly handled certain repository paths in platforms with multiple users support. An attacker…
first Apr 25, 2022 -
Medium max 6.0USN-5376-1 1 CVE
git vulnerability
俞晨东 discovered that Git incorrectly handled certain repository paths in platforms with multiple users support. An attacker could possibly use this issue to run arbitrary commands.
first Apr 12, 2022 -
Medium max 6.5USN-5290-1 2 CVEs
symfony vulnerabilities
James Isaac and Mathias Brodala discovered that Symfony incorrectly handled switch users functionality. An attacker could possibly use this issue to enumerate users. (CVE-2021-21424) It was discovered that Symfony incorrectly handled certain specially crafted…
first Aug 24, 2022 -
Medium max 6.1USN-5276-1 2 CVEs
nvidia-graphics-drivers-450-server, nvidia-graphics-drivers-470, nvidia-graphics-drivers-470-server, nvidia-graphics-drivers-510 vulnerabilities
It was discovered that the NVIDIA graphics drivers incorrectly handled permissions in the kernel mode layer. A local attacker could use this issue to write to protected memory and cause a denial of service.
first Feb 8, 2022 -
Medium max 5.3USN-5216-1 1 CVE
node-hosted-git-info vulnerability
It was discovered that hosted-git-info incorrectly handled certain inputs. A remote attacker could use this to cause a denial of service.
first Sep 2, 2022 -
Medium max 4.4USN-5175-1 1 CVE
ntp vulnerability
It was discovered that ntpd incorrectly handled memory when CMAC keys were used. A remote attacker could possibly use this issue to cause ntpd to crash resulting in a denial of service.
first Dec 6, 2021 -
Medium max 5.4USN-5157-1 1 CVE
postorius vulnerability
It was discovered that Postorius mishandled specially crafted input. An attacker could use this vulnerability that obtain sensitive information.
first Nov 25, 2021 -
Medium max 5.9USN-5100-1 1 CVE
containerd vulnerability
It was discovered that containerd insufficiently restricted permissions on container root and plugin directories. If a user or automated system were tricked into launching a specially crafted container image, a remote attacker could traverse directory content…
first Oct 4, 2021 -
Medium max 6.5USN-5077-1 2 CVEs
apport vulnerabilities
Maik Münch and Stephen Röttger discovered that Apport incorrectly handled certain information gathering operations. A local attacker could use this issue to gain read access to arbitrary files, possibly containing sensitive information.
first Sep 14, 2021 -
Medium max 6.5USN-5066-1 1 CVE
python-pysaml2 vulnerability
Brian Wolff discovered that PySAML2 incorrectly validated cryptographic signatures. A remote attacker could possibly use this issue to alter SAML documents.
first Sep 8, 2021 -
Medium max 5.5USN-5065-1 1 CVE
openvswitch vulnerability
It was discovered that Open vSwitch incorrectly handled decoding RAW_ENCAP actions. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Sep 8, 2021 -
Medium max 5.0USN-5012-1 1 CVE
containerd vulnerabilities
It was discovered that containerd incorrectly handled file permission changes. If a user or automated system were tricked into launching a specially crafted container image, a remote attacker could change permissions on files on the host filesystem and possib…
first Jul 20, 2021 -
Medium max 6.8
libimage-exiftool-perl vulnerability
It was discovered that ExifTool did not properly sanitize user data for the DjVu file format. An attacker could use this vulnerability to cause a DoS or possibly execute arbitrary code.
first Jun 10, 2021 -
Medium max 4.0USN-4976-1 1 CVE
dnsmasq vulnerability
Petr Mensik discovered that Dnsmasq incorrectly randomized source ports in certain configurations. A remote attacker could possibly use this issue to facilitate DNS cache poisoning attacks.
first Jun 2, 2021 -
Medium max 5.3USN-4956-1 1 CVE
python-eventlet vulnerability
It was discovered that Eventlet incorrectly handled certain requests. An attacker could possibly use this issue to cause a denial of service.
first May 17, 2021 -
Medium max 6.1USN-4896-2 1 CVE
lxml vulnerability
USN-4896-1 fixed a vulnerability in lxml. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that lxml incorrectly handled certain HTML attributes. A remote attacker could possibly use this issue t…
first Apr 8, 2021 -
Medium max 6.1USN-4896-1 1 CVE
lxml vulnerability
It was discovered that lxml incorrectly handled certain HTML attributes. A remote attacker could possibly use this issue to perform cross-site scripting (XSS) attacks.
first Mar 30, 2021 -
Medium max 5.5USN-4832-1 1 CVE
plexus-archiver vulnerability
It was discovered that Plexus Archiver incorrectly handled directory traversal during extraction. An attacker could possibly use this for a Zip-Slip attack.
first Mar 15, 2021 -
Medium max 5.9USN-4742-1 1 CVE
python-django vulnerability
It was discovered that Django incorrectly accepted semicolons as query parameters. A remote attacker could possibly use this issue to perform a Web Cache Poisoning attack.
first Feb 22, 2021 -
Medium max 5.3USN-4715-2 1 CVE
python-django vulnerability
USN-4715-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Wang Baohua discovered that Django incorrectly extracted archive files. A remote attacker could possibly use this issue …
first Feb 1, 2021 -
Medium max 5.3USN-4715-1 1 CVE
python-django vulnerability
Wang Baohua discovered that Django incorrectly extracted archive files. A remote attacker could possibly use this issue to extract files outside of their expected location.
first Feb 1, 2021 -
Medium max 6.1USN-4675-1 1 CVE
horizon vulnerability
Pritam Singh discovered that OpenStack Horizon incorrectly validated certain parameters. An attacker could possibly use this issue to cause OpenStack Horizon to redirect to a malicious URL.
first Jan 5, 2021 -
Medium max 6.8USN-4661-1 1 CVE
snapcraft vulnerability
It was discovered that Snapcraft includes the current directory when configuring LD_LIBRARY_PATH for application commands. If a user were tricked into installing a malicious snap or downloading a malicious library, under certain circumstances an attacker coul…
first Dec 3, 2020 -
Medium max 5.2USN-4653-2 1 CVE
containerd vulnerability
USN-4653-1 fixed a vulnerability in containerd. Unfortunately, those containerd packages introduced a regression in docker.io and the update was reverted. This update addresses the docker.io issue and reintroduces the fixes from USN-4653-1. We apologize for t…
first Jan 13, 2021 -
Medium max 5.2USN-4653-1 1 CVE
containerd vulnerability
It was discovered that access controls for the shim’s API socket did not restrict access to the abstract unix domain socket in some cases. An attacker could use this vulnerability to run containers with elevated privileges.
first Nov 30, 2020 -
Medium max 5.9USN-4613-1 1 CVE
python-cryptography vulnerability
Hubert Kario discovered that python-cryptography incorrectly handled certain decryption. An attacker could possibly use this issue to expose sensitive information.
first Nov 3, 2020 -
Medium max 6.1USN-4589-2 1 CVE
docker.io vulnerability
USN-4589-1 fixed a vulnerability in containerd. This update provides the corresponding update for docker.io. Original advisory details: It was discovered that containerd could be made to expose sensitive information when processing URLs in container image man…
first Oct 15, 2020 -
Medium max 6.1USN-4589-1 1 CVE
containerd vulnerability
It was discovered that containerd could be made to expose sensitive information when processing URLs in container image manifests. A remote attacker could use this to trick the user and obtain the user's registry credentials.
first Oct 15, 2020 -
Medium max 4.0USN-4537-1 1 CVE
aptdaemon vulnerability
Vaisha Bernard discovered that Aptdaemon incorrectly handled the Locale property. A local attacker could use this issue to test for the presence of local files.
first Sep 24, 2020 -
Medium max 6.5USN-4531-1 1 CVE
busybox vulnerability
It was discovered that the BusyBox wget applet incorrectly validated SSL certificates. A remote attacker could possibly use this issue to intercept secure communications.
first Sep 22, 2020 -
Medium max 5.9USN-4424-1 1 CVE
snapd vulnerabilities
It was discovered that cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices ran on every boot without restrictions. A physical attacker could exploit this to craft cloud-init user-data/meta-data via external media to perform arbitrary c…
first Jul 15, 2020 -
Medium max 4.9USN-4399-1 2 CVEs
bind9 vulnerabilities
It was discovered that Bind incorrectly handled large responses during zone transfers. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2020-8618) It was discovered that Bind incorrectly handled ce…
first Jun 17, 2020 -
Medium max 6.1USN-4381-2 2 CVEs
python-django vulnerabilities
USN-4381-1 fixed several vulnerabilities in Django. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Dan Palmer discovered that Django incorrectly validated memcached cache keys. A remote attacker could possibly u…
first Jun 4, 2020 -
Medium max 6.1USN-4381-1 2 CVEs
python-django vulnerabilities
Dan Palmer discovered that Django incorrectly validated memcached cache keys. A remote attacker could possibly use this issue to cause a denial of service and obtain sensitive information. (CVE-2020-13254) Jon Dufresne discovered that Django incorrectly encod…
first Jun 3, 2020 -
Medium max 6.5USN-4348-1 3 CVEs
mailman vulnerabilities
It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this to issue execute arbitrary scripts or HTML. (CVE-2018-0618) It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly us…
first Apr 29, 2020 -
Medium max 4.0USN-4334-1 1 CVE
git vulnerability
Carlo Arenas discovered that Git incorrectly handled certain URLs containing newlines, empty hosts, or lacking a scheme. A remote attacker could possibly use this issue to trick Git into returning credential information for a wrong host.
first Apr 21, 2020 -
Medium max 6.5USN-4315-2 2 CVEs
apport vulnerabilities
USN-4315-1 fixed several vulnerabilities in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Maximilien Bourgeteau discovered that the Apport lock file was created with insecure permissions. This could all…
first Jun 15, 2020 -
Medium max 6.5USN-4315-1 2 CVEs
apport vulnerabilities
Maximilien Bourgeteau discovered that the Apport lock file was created with insecure permissions. This could allow a local attacker to escalate their privileges via a symlink attack. (CVE-2020-8831) Maximilien Bourgeteau discovered a race condition in Apport …
first Apr 2, 2020