1,181 results · Clear filters · Feed
-
Medium max 6.5USN-8746-1 1 CVE
libebml vulnerability
It was discovered that libEBML incorrectly handled certain read and write operations. An attacker could possibly use this issue to cause a buffer overflow, resulting in a denial of service.
-
Medium max 5.3
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities
Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system cr…
first Aug 10, 2022 -
Medium max 5.5USN-5493-2 1 CVE
linux-hwe-5.13 vulnerability
It was discovered that the 8 Devices USB2CAN interface implementation in the Linux kernel did not properly handle certain error conditions, leading to a double-free. A local attacker could possibly use this to cause a denial of service (system crash).
first Jul 1, 2022 -
Medium max 5.5USN-5493-1 1 CVE
linux, linux-hwe vulnerability
It was discovered that the 8 Devices USB2CAN interface implementation in the Linux kernel did not properly handle certain error conditions, leading to a double-free. A local attacker could possibly use this to cause a denial of service (system crash).
first Jun 27, 2022 -
Medium max 6.7USN-5465-1 3 CVEs
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
It was discovered that the Linux kernel did not properly restrict access to the kernel debugger when booted in secure boot environments. A privileged attacker could use this to bypass UEFI Secure Boot restrictions. (CVE-2022-21499) Aaron Adams discovered that…
first Jun 8, 2022 -
Medium max 5.5USN-5500-1 8 CVEs
linux, linux-aws vulnerabilities
Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not perform permission checks correctly in some situations. A local attacker could possibly use this to gain administrative privileges. (CVE-2021-4197) Lin Ma d…
first Jul 1, 2022 -
Medium max 6.4
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
It was discovered that the VFIO PCI driver in the Linux kernel did not properly handle attempts to access disabled memory spaces. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-12888) Mathy Vanhoef discovered that the L…
first Apr 1, 2022 -
Medium max 6.5USN-5210-1 7 CVEs
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities
Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. (CVE-2021-4002) It was discovered t…
first Jan 6, 2022 -
Medium max 6.5USN-4185-1 11 CVEs
linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle vulnerabilities
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchro…
first Nov 13, 2019 -
Medium max 6.5USN-4185-2 7 CVEs
linux-azure vulnerabilities
Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchro…
first Nov 13, 2019 -
Medium max 6.5USN-4186-2 11 CVEs
linux-lts-xenial, linux-aws vulnerabilities
USN-4186-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 ESM. Stephan van Schaik, Alyssa Milburn, Sebastian …
first Nov 13, 2019 -
Medium max 5.7USN-8736-1 2 CVEs
perl vulnerabilities
It was discovered that Perl incorrectly handled certain large inputs during regular expression matching. An attacker could possibly use this issue to trigger out-of-bounds heap reads or writes, resulting in a denial of service or arbitrary code execution. (CV…
first Sep 8, 2026 -
Medium max 5.0USN-8735-1 1 CVE
hsqldb1.8.0 vulnerability
It was discovered that HSQLDB incorrectly handled specially crafted database files. An attacker could possibly use this issue to overwrite arbitrary files.
-
Medium max 6.9USN-8733-1 2 CVEs
gzip vulnerabilities
Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe utility created temporary files in an insecure manner when mktemp was unavailable. A local attacker could possibly use this issue to overwrite arbitrary files. (CVE-2026-41991) Elias Hasa…
first Sep 7, 2026 -
Medium max 6.1USN-4258-1 15 CVEs
linux-aws-5.0, linux-gcp, linux-gke-5.0, linux-oracle-5.0 vulnerabilities
It was discovered that the Atheros 802.11ac wireless USB device driver in the Linux kernel did not properly validate device metadata. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2019-15099) It was discovere…
first Jan 29, 2020 -
Medium max 6.3USN-4578-1 7 CVEs
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
Hadar Manor discovered that the DCCP protocol implementation in the Linux kernel improperly handled socket reuse, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitr…
first Oct 14, 2020 -
Medium max 6.3USN-4114-1 5 CVEs
linux, linux-azure, linux-gcp, linux-gke-5.0, linux-hwe, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
Amit Klein and Benny Pinkas discovered that the Linux kernel did not sufficiently randomize IP ID values generated for connectionless networking protocols. A remote attacker could use this to track particular Linux devices. (CVE-2019-10638) Praveen Pandey dis…
first Sep 2, 2019 -
Medium max 4.7USN-4145-1 11 CVEs
linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that a race condition existed in the GFS2 file system in the Linux kernel. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2016-10905) It was discovered that the IPv6 implementation in the Linux ker…
first Oct 1, 2019 -
Medium max 6.3USN-4579-1 4 CVEs
linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon vulnerabilities
Hadar Manor discovered that the DCCP protocol implementation in the Linux kernel improperly handled socket reuse, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitr…
first Oct 14, 2020 -
Medium max 6.3USN-4116-1 6 CVEs
linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that a use-after-free error existed in the block layer subsystem of the Linux kernel when certain failure conditions occurred. A local attacker could possibly use this to cause a denial of service (system crash) or possibly execute arbitrary…
first Sep 2, 2019 -
Medium max 5.6USN-4096-1 1 CVE
linux-aws, linux-aws-hwe vulnerability
Andrei Vlad Lutas and Dan Lutas discovered that some x86 processors incorrectly handle SWAPGS instructions during speculative execution. A local attacker could use this to expose sensitive information (kernel memory).
first Aug 13, 2019 -
Medium max 6.5USN-3932-2 20 CVEs
linux-lts-xenial, linux-aws vulnerabilities
USN-3932-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that a race condition existe…
first Apr 2, 2019 -
Medium max 6.1USN-4284-1 23 CVEs
linux, linux-aws, linux-azure, linux-azure-5.3, linux-gcp, linux-gcp-5.3, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-raspi2-5.3 vulnerabilities
It was discovered that the Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors. A local attacker could use this to expose sensitive information. (CVE-2019-14615) It was discovered that the Atheros 802.…
first Feb 19, 2020 -
Medium max 5.5USN-8718-1 1 CVE
sssd vulnerability
It was discovered that SSSD did not properly validate authentication token lengths when processing PAM responder requests. A local attacker could possibly use this issue to cause SSSD to crash, resulting in a denial of service.
-
Medium max 5.1USN-8723-1 2 CVEs
spice-vdagent vulnerabilities
It was discovered that SPICE vdagent had an integer overflow in the buffer size calculation used when writing to the daemon socket. A malicious or compromised SPICE host could possibly use this issue to cause SPICE vdagent to crash, resulting in a denial of s…
-
Medium max 4.8USN-8721-1 3 CVEs
openssh vulnerabilities
It was discovered that OpenSSH's ssh-agent incorrectly handled interactions between agent locking and the session-bind@openssh.com extension. A remote attacker with access to a forwarded agent connection could possibly use this issue to perform operations tha…
-
Medium max 5.9USN-8717-1 1 CVE
tika vulnerability
It was discovered that Apache Tika's ISA-Tab parser incorrectly handled file path resolution. An attacker who could place files in a directory that Tika subsequently parses could use this issue to read arbitrary files accessible to the Tika process and have t…
-
Medium max 6.5USN-8690-1 1 CVE
pillow vulnerability
It was discovered that Pillow did not properly manage memory when processing certain image files. An attacker could possibly use this issue to cause a denial of service or read sensitive data.
first Sep 1, 2026 -
Medium max 6.4USN-8672-1 1 CVE
sssd vulnerability
It was discovered that the SSSD PAM responder may crash if a physically proximate attacker manipulates a smartcard or Yubikey. Non-malicious physically proximate users may not be able to log in depending upon the details of their legitimate smartcard or Yubik…
first Aug 25, 2026 -
Medium max 5.9USN-8711-1 1 CVE
libgcrypt20 vulnerability
It was discovered that Libgcrypt had a timing-based side-channel flaw in its RSA implementation. A remote attacker could possibly use this issue to obtain sensitive information.
first Sep 1, 2026 -
Medium max 6.8USN-8707-1 3 CVEs
opencryptoki vulnerabilities
It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use this issue to trigger out-of-bounds reads. (CVE-2026-40253) It was discovered that openCryptoki incorrectly …
first Aug 31, 2026 -
Medium max 4.6USN-8704-1 3 CVEs
cpio vulnerabilities
It was discovered that cpio incorrectly sanitized hard-link targets when extracting tar archives in copy-in mode. If a user or automated system were tricked into extracting a specially crafted tar archive, an attacker could possibly use this issue to create h…
first Aug 31, 2026 -
Medium max 4.8USN-8685-1 1 CVE
bzip2 vulnerability
It was discovered that bzip2 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a crash, resulting in a denial of service.
first Aug 27, 2026 -
Medium max 6.7USN-8699-1 9 CVEs
libssh vulnerabilities
It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long filenames. An attacker could possibly use this issue to cause libssh to crash or execute arbitrary code. This issue only affected…
-
Medium max 6.8USN-8686-1 2 CVEs
opencryptoki vulnerabilities
It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use this issue to trigger out-of-bounds reads. (CVE-2026-40253) It was discovered that openCryptoki incorrectly …
first Aug 27, 2026 -
Medium max 4.6USN-8697-1 2 CVEs
coreutils vulnerabilities
It was discovered that GNU Core Utilities sort had a heap buffer under-read in its begfield() function. A local attacker could possibly use this issue to cause GNU Core Utilities to crash, resulting in a denial of service, or obtain sensitive information. (CV…
-
Medium max 6.2USN-8687-1 2 CVEs
p11-kit vulnerabilities
It was discovered that p11-kit incorrectly handled certain RPC messages. A local attacker could use this issue to cause p11-kit to crash, resulting in a denial of service. (CVE-2026-13757) It was discovered that p11-kit incorrectly handled nested attribute de…
first Aug 27, 2026 -
Medium max 5.5USN-7915-1 3 CVEs
radare2 vulnerabilities
It was discovered that Radare2 contained several memory leaks. An attacker could possibly use these issues to cause a denial of service.
first Dec 8, 2025 -
Medium max 5.3USN-8683-1 2 CVEs
libheif vulnerabilities
Feng Ning discovered that libheif incorrectly handled certain image transforms. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-62289) A…
first Aug 26, 2026 -
Medium max 4.0USN-8655-1 1 CVE
async-http-client vulnerability
It was discovered that AsyncHttpClient did not properly verify that the responding host was allowed to set cookies for a given domain in its ThreadSafeCookieStore. An attacker could use this to plant cookies scoped to unrelated domains, which would then be se…
first Aug 20, 2026