1,181 results · Clear filters · Feed
-
Medium max 6.4USN-4295-1 1 CVE
rake vulnerability
It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands.
first Mar 3, 2020 -
Medium max 6.5USN-4104-1 1 CVE
nova vulnerability
Donny Davis discovered that the Nova Compute service could return configuration or other information in response to a failed API request in some situations. A remote attacker could use this to expose sensitive information.
first Aug 19, 2019 -
Medium max 6.1USN-4089-1 1 CVE
ruby-rack vulnerability
It was discovered that Rack incorrectly handled carefully crafted requests. A remote attacker could use this issue to execute a cross-site scripting (XSS) attack.
first Aug 7, 2019 -
Medium max 6.5USN-4051-2 1 CVE
apport vulnerability
USN-4051-1 fixed a vulnerability in apport. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Kevin Backhouse discovered a race-condition when reading the user's local Apport configuration. This could be used by a …
first Jul 9, 2019 -
Medium max 6.5USN-4051-1 1 CVE
apport vulnerability
Kevin Backhouse discovered a race-condition when reading the user's local Apport configuration. This could be used by a local attacker to cause Apport to include arbitrary files in a resulting crash report.
first Jul 9, 2019 -
Medium max 5.3USN-4041-2 1 CVE
linux-lts-xenial, linux-aws, linux-azure update
USN-4041-1 provided updates for the Linux kernel in Ubuntu. This update provides the corresponding updates for the Linux kernel for Ubuntu 16.04 ESM. USN-4017-2 fixed vulnerabilities in the Linux kernel. Unfortunately, the update introduced a regression that …
first Jun 29, 2019 -
Medium max 6.5USN-4036-1 1 CVE
neutron vulnerability
Erik Olof Gunnar Andersson discovered that OpenStack Neutron incorrectly handled certain security group rules in the iptables firewall module. An authenticated attacker could possibly use this issue to block further application of security group rules for oth…
first Jun 25, 2019 -
Medium max 6.1USN-3990-2 1 CVE
python-urllib3 vulnerability
USN-3990-1 fixed a vulnerability in urllib3. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that urllib3 incorrectly stripped certain characters from requests. A remote attacker could use this …
first Jul 29, 2019 -
Medium max 5.9USN-3977-3 4 CVEs
intel-microcode update
USN-3977-1 and USN-3977-2 provided mitigations for Microarchitectural Data Sampling (MDS) vulnerabilities in Intel Microcode for a large number of Intel processor families. This update provides the corresponding updated microcode mitigations for the Intel San…
first Jun 20, 2019 -
Medium max 6.4USN-3968-3 2 CVEs
sudo vulnerabilities
USN-3968-1 fixed several vulnerabilities in Sudo. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Florian Weimer discovered that Sudo incorrectly handled the noexec restriction when used with certain applications…
first Sep 28, 2020 -
Medium max 6.4USN-3968-1 2 CVEs
sudo vulnerabilities
Florian Weimer discovered that Sudo incorrectly handled the noexec restriction when used with certain applications. A local attacker could possibly use this issue to bypass configured restrictions and execute arbitrary commands. (CVE-2016-7076) It was discove…
first May 6, 2019 -
Medium max 4.8USN-3966-1 1 CVE
gnome-shell vulnerability
It was discovered that the GNOME Shell incorrectly handled certain keyboard inputs. An attacker could possibly use this issue to invoke keyboard shortcuts, and potentially other actions while the workstation was locked.
first May 6, 2019 -
Medium max 5.0USN-3923-1 4 CVEs
qemu vulnerabilities
Michael Hanselmann discovered that QEMU incorrectly handled the Media Transfer Protocol (MTP). An attacker inside the guest could use this issue to read or write arbitrary files and cause a denial of service, or possibly execute arbitrary code. This issue onl…
first Mar 27, 2019 -
Medium max 5.7USN-3917-1 1 CVE
snapd vulnerability
The snapd default seccomp filter for strict mode snaps blocks the use of the ioctl() system call when used with TIOCSTI as the second argument to the system call. Jann Horn discovered that this restriction could be circumvented on 64 bit architectures. A mali…
first Mar 21, 2019 -
Medium max 5.9USN-3903-2 3 CVEs
linux-hwe, linux-azure vulnerabilities
USN-3903-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.10 for Ubuntu 18.04 LTS. Jason Wang discovered that the vhost net driver in the…
first Mar 6, 2019 -
Medium max 5.9USN-3885-2 1 CVE
openssh vulnerability
USN-3885-1 fixed vulnerabilities in OpenSSH. It was discovered that the fix for CVE-2019-6111 turned out to be incomplete. This update fixes the problem. Original advisory details: Harry Sintonen discovered multiple issues in the OpenSSH scp utility. If a use…
first Mar 4, 2019 -
Medium max 6.1USN-3872-1 4 CVEs
linux-hwe vulnerabilities
It was discovered that a race condition existed in the vsock address family implementation of the Linux kernel that could lead to a use-after-free condition. A local attacker in a guest virtual machine could use this to expose sensitive information (host mach…
first Jan 29, 2019 -
Medium max 6.5USN-3851-1 1 CVE
python-django vulnerability
It was discovered that Django incorrectly handled the default 404 page. A remote attacker could use this issue to spoof content using a malicious URL.
first Jan 9, 2019 -
Medium max 6.1USN-3841-1 1 CVE
lxml vulnerability
It was discovered that lxml incorrectly handled certain HTML files. An attacker could possibly use this issue to conduct cross-site scripting (XSS) attacks.
first Dec 10, 2018 -
Medium max 6.1USN-3794-1 1 CVE
moin vulnerability
It was discovered that MoinMoin incorrectly handled certain inputs. An attacker could possibly use this issue to access sensitive information.
first Oct 16, 2018 -
Medium max 6.1USN-3733-1 1 CVE
gnupg vulnerability
Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that GnuPG is vulnerable to a cache side-channel attack. A local attacker could use this attack to …
first Aug 7, 2018 -
Medium max 5.3USN-3731-1 1 CVE
lftp vulnerability
It was discovered that LFTP incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service.
first Aug 6, 2018 -
Medium max 6.1USN-3726-1 1 CVE
python-django vulnerability
Andreas Hug discovered that Django contained an open redirect in CommonMiddleware. A remote attacker could possibly use this issue to perform phishing attacks.
first Aug 1, 2018 -
Medium max 5.4USN-3703-1 1 CVE
libarchive-zip-perl vulnerability
It was discovered that the Archive Zip module incorrectly handled certain inputs. An attacker could possibly use this to access sensitive information.
first Jul 4, 2018 -
Medium max 5.5USN-3697-2 7 CVEs
linux-oem vulnerabilities
It was discovered that a null pointer dereference vulnerability existed in the DCCP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2018-1130) Jann Horn discovered that the 32 bit …
first Jul 2, 2018 -
Medium max 5.3USN-3691-1 10 CVEs
openjdk-7 vulnerabilities
It was discovered that the Security component of OpenJDK did not correctly perform merging of multiple sections for the same file listed in JAR archive file manifests. An attacker could possibly use this to modify attributes in a manifest without invalidating…
first Jun 21, 2018 -
Medium max 5.6USN-3690-1 1 CVE
amd64-microcode update
Jann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, includ…
first Jun 20, 2018 -
Medium max 5.9USN-3666-1 1 CVE
python-oslo.middleware vulnerability
Divya K Konoor discovered Oslo middleware was vulnerable to an information disclosure. A local attacker could exploit this flaw to obtain sensitive information from OpenStack component error logs.
first May 31, 2018 -
Medium max 5.5USN-3656-1 12 CVEs
linux-raspi2, linux-snapdragon vulnerabilities
Tuba Yavuz discovered that a double-free error existed in the USBTV007 driver of the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-17975) It was discovered that a race c…
first May 22, 2018 -
Medium max 5.3USN-3644-1 11 CVEs
openjdk-8 vulnerabilities
It was discovered that the Security component of OpenJDK did not correctly perform merging of multiple sections for the same file listed in JAR archive file manifests. An attacker could possibly use this to modify attributes in a manifest without invalidating…
first May 11, 2018 -
Medium max 5.5USN-3619-2 39 CVEs
linux-lts-xenial, linux-aws vulnerabilities
USN-3619-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Jann Horn discovered that the Berkeley Packet …
first Apr 5, 2018 -
Medium max 5.6USN-3597-2 3 CVEs
linux-hwe vulnerabilities
USN-3597-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS. USNS 3541-2 and 3523-2 provided mitigations for Spectr…
first Mar 15, 2018 -
Medium max 5.3USN-3591-1 2 CVEs
python-django vulnerabilities
James Davis discovered that Django incorrectly handled certain template filters. A remote attacker could possibly use this issue to cause Django to consume resources, resulting in a denial of service.
first Mar 6, 2018 -
Medium max 5.3USN-3585-1 1 CVE
twisted vulnerability
It was discovered that Twisted incorrectly handled certain HTTP requests. An attacker could possibly use this issue to execute arbitrary code.
first Mar 5, 2018 -
Medium max 5.6USN-3582-2 6 CVEs
linux-lts-xenial, linux-aws vulnerabilities
USN-3582-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Mohamed Ghannam discovered that the IPv4 raw s…
first Feb 22, 2018 -
Medium max 5.6USN-3581-2 4 CVEs
linux-hwe, linux-azure, linux-gcp, linux-oem vulnerabilities
USN-3581-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS. Mohamed Ghannam discovered that the IPv4 raw socket im…
first Feb 22, 2018 -
Medium max 5.8USN-3575-1 11 CVEs
qemu vulnerabilities
It was discovered that QEMU incorrectly handled guest ram. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-11334) D…
first Feb 20, 2018 -
Medium max 5.5USN-3567-1 1 CVE
puppet vulnerability
It was discovered that Puppet incorrectly handled permissions when unpacking certain tarballs. A local user could possibly use this issue to execute arbitrary code.
first Feb 12, 2018 -
Medium max 5.6USN-3560-1 1 CVE
qemu update
It was discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. An attacker in the guest could use this to expose sensitive guest informat…
first Feb 7, 2018 -
Medium max 5.6USN-3531-3 1 CVE
intel-microcode update
Jann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, includ…
first Mar 29, 2018