1,181 results · Clear filters · Feed
-
Medium max 4.8USN-6998-1 2 CVEs
unbound vulnerabilities
It was discovered that Unbound incorrectly handled string comparisons, which could lead to a NULL pointer dereference. An attacker could potentially use this issue to cause a denial of service. (CVE-2024-43167) It was discovered that Unbound incorrectly handl…
first Sep 11, 2024 -
Medium max 4.5USN-6993-1 2 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory when closing a window, leading to a double-free vulnerability. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service, or possi…
first Sep 5, 2024 -
Medium max 6.5USN-6985-1 11 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or execute c…
first Sep 4, 2024 -
Medium max 6.3USN-6944-2 1 CVE
curl vulnerability
USN-6944-1 fixed CVE-2024-7264 for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. This update provides the corresponding fix for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: Dov Murik discovered that curl inc…
first Aug 20, 2024 -
Medium max 5.8USN-6837-2 3 CVEs
ruby-rack vulnerabilities
It was discovered that Rack incorrectly parsed certain media types. A remote attacker could possibly use this issue to cause Rack to consume resources, leading to a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2024-2…
first Aug 19, 2024 -
Medium max 5.5USN-6827-1 1 CVE
tiff vulnerability
It was discovered that LibTIFF incorrectly handled memory when performing certain cropping operations, leading to a heap buffer overflow. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code.
first Jun 11, 2024 -
Medium max 5.4USN-6787-1 1 CVE
jinja2 vulnerability
It was discovered that Jinja2 incorrectly handled certain HTML attributes that were accepted by the xmlattr filter. An attacker could use this issue to inject arbitrary HTML attribute keys and values to potentially execute a cross-site scripting (XSS) attack.
first May 28, 2024 -
Medium max 5.5USN-6760-1 1 CVE
gerbv vulnerability
George-Andrei Iosif and David Fernandez Gonzalez discovered that Gerbv did not properly initialize a data structure when parsing certain nested RS-274X format files. If a user were tricked into opening a specially crafted file, an attacker could possibly use …
first Apr 30, 2024 -
Medium max 6.7USN-6744-1 1 CVE
pillow vulnerability
Hugo van Kemenade discovered that Pillow was not properly performing bounds checks when processing an ICC file, which could lead to a buffer overflow. If a user or automated system were tricked into processing a specially crafted ICC file, an attacker could p…
first Apr 22, 2024 -
Medium max 5.5USN-6645-1 1 CVE
linux vulnerability
It was discovered that the netfilter connection tracker for netlink in the Linux kernel did not properly perform reference counting in some error conditions. A local attacker could possibly use this to cause a denial of service (memory exhaustion).
first Feb 20, 2024 -
Medium max 4.7USN-6640-1 1 CVE
shadow vulnerability
It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker could possibly use this issue to retrieve a password from memory, exposing sensitive information.
first Feb 15, 2024 -
Medium max 6.2USN-6621-1 1 CVE
imagemagick vulnerability
It was discovered that ImageMagick incorrectly handled certain values when processing BMP files. An attacker could exploit this to cause a denial of service.
first Feb 1, 2024 -
Medium max 6.5USN-6613-1 1 CVE
ceph vulnerability
Lucas Henry discovered that Ceph incorrectly handled specially crafted POST requests. An uprivileged user could use this to bypass Ceph's authorization checks and upload a file to any bucket.
first Jan 29, 2024 -
Medium max 5.4USN-6599-1 2 CVEs
jinja2 vulnerabilities
Yeting Li discovered that Jinja incorrectly handled certain regex. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2020-28493) It was discovered th…
first Jan 25, 2024 -
Medium max 5.5USN-6588-2 1 CVE
pam vulnerability
USN-6588-1 fixed a vulnerability in PAM. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: Matthias Gerstner discovered that the PAM pam_namespace module incorrectly handled…
first Mar 26, 2024 -
Medium max 5.5USN-6580-1 1 CVE
w3m vulnerability
It was discovered that w3m incorrectly handled certain HTML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first Jan 15, 2024 -
Medium max 5.5USN-6544-1 5 CVEs
binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled certain COFF files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2022-38533) It was discovered that GNU binutils w…
first Dec 11, 2023 -
Medium max 5.5USN-6512-1 2 CVEs
tiff vulnerabilities
It was discovered that LibTIFF could be made to run into an infinite loop. If a user or an automated system were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service. (CVE-2022-40090) It w…
first Nov 23, 2023 -
Medium max 6.2USN-6487-1 5 CVEs
avahi vulnerabilities
Evgeny Vereshchagin discovered that Avahi contained several reachable assertions, which could lead to intentional assertion failures when specially crafted user input was given. An attacker could possibly use this issue to cause a denial of service. (CVE-2023…
first Nov 20, 2023 -
Medium max 5.5USN-6478-1 1 CVE
traceroute vulnerability
It was discovered that Traceroute did not properly parse command line arguments. An attacker could possibly use this issue to execute arbitrary commands.
first Nov 14, 2023 -
Medium max 6.5USN-6419-1 5 CVEs
jqueryui vulnerabilities
Hong Phat Ly discovered that jQuery UI did not properly manage parameters from untrusted sources, which could lead to arbitrary web script or HTML code injection. A remote attacker could possibly use this issue to perform a cross-site scripting (XSS) attack. …
first Oct 5, 2023 -
Medium max 4.4USN-6373-1 1 CVE
gawk vulnerability
It was discovered that gawk could be made to read out of bounds when processing certain inputs. If a user or an automated system were tricked into opening a specially crafted input, an attacker could possibly use this issue to cause a denial of service.
first Sep 14, 2023 -
Medium max 6.2USN-6345-1 1 CVE
sox vulnerability
It was discovered that SoX incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, an attacker could possibly use this issue to cause a denial of service.
first Sep 6, 2023 -
Medium max 6.5USN-6290-1 10 CVEs
tiff vulnerabilities
It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image files with the tiffcrop utility. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause…
first Aug 15, 2023 -
Medium max 5.9USN-6237-3 2 CVEs
curl vulnerabilities
USN-6237-1 fixed several vulnerabilities in curl. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: Hiroki Kurosawa discovered that curl incorrectly handled validating certa…
first Sep 11, 2023 -
Medium max 5.9USN-6229-1 4 CVEs
tiff vulnerabilities
It was discovered that LibTIFF was not properly handling variables used to perform memory management operations when processing an image through tiffcrop, which could lead to a heap buffer overflow. An attacker could possibly use this issue to cause a denial …
first Jul 13, 2023 -
Medium max 6.5USN-6198-1 1 CVE
screen vulnerability
It was discovered that GNU Screen was not properly checking user identifiers before sending certain signals to target processes. If GNU Screen was installed as setuid or setgid, a local attacker could possibly use this issue to cause a denial of service on a …
first Jul 3, 2023 -
Medium max 6.5USN-6188-1 1 CVE
openssl vulnerability
Matt Caswell discovered that OpenSSL incorrectly handled certain ASN.1 object identifiers. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service.
first Jun 22, 2023 -
Medium max 6.5USN-6167-1 4 CVEs
qemu vulnerabilities
It was discovered that QEMU did not properly manage the guest drivers when shared buffers are not allocated. A malicious guest driver could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue…
first Jun 19, 2023 -
Medium max 5.5USN-6165-2 5 CVEs
glib2.0 vulnerabilities
USN-6165-1 fixed vulnerabilities in GLib. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that GLib incorrectly handled non-normal GVariants. An attacker …
first Oct 19, 2023 -
Medium max 6.5USN-6101-1 4 CVEs
binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled certain DWARF files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 22.10. (CVE-2023-1579) It was discovered that GNU binutils did n…
first May 24, 2023 -
Medium max 5.3USN-6098-1 8 CVEs
Jhead vulnerabilities
It was discovered that Jhead did not properly handle certain crafted images while processing the JFIF markers. An attacker could cause Jhead to crash. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2019-19035) It was d…
first May 23, 2023 -
Medium max 6.5USN-6028-1 2 CVEs
libxml2 vulnerabilities
It was discovered that lixml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2023-28484) It was discovered that libxml2 incorrectly handled certain XML files. An attacker could…
first Apr 19, 2023 -
Medium max 6.8USN-5923-1 10 CVEs
tiff vulnerabilities
It was discovered that LibTIFF could be made to read out of bounds when processing certain malformed image files with the tiffcrop tool. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause tif…
first Mar 6, 2023 -
Medium max 5.5USN-5928-1 2 CVEs
systemd vulnerabilities
It was discovered that systemd did not properly validate the time and accuracy values provided to the format_timespan() function. An attacker could possibly use this issue to cause a buffer overrun, leading to a denial of service attack. This issue only affec…
first Mar 7, 2023 -
Medium max 5.5USN-6129-2 1 CVE
avahi vulnerability
USN-6129-1 fixed a vulnerability in Avahi. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that Avahi incorrectly handled certain DBus messages. A local at…
first Jul 25, 2023 -
Medium max 5.5USN-5900-1 1 CVE
tar vulnerability
It was discovered that tar incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information or cause a crash.
first Feb 28, 2023 -
Medium max 5.9USN-5894-1 3 CVEs
curl vulnerabilities
Harry Sintonen and Tomas Hoger discovered that curl incorrectly handled TELNET connections when the -t option was used on the command line. Uninitialized data possibly containing sensitive information could be sent to the remote server, contrary to expectatio…
first Feb 27, 2023 -
Medium max 6.5USN-5855-4 2 CVEs
imagemagick vulnerabilities
USN-5855-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that ImageMagick incorrectly handled certain PNG images. If a user or autom…
first Apr 17, 2023 -
Medium max 6.3USN-5841-1 6 CVEs
tiff vulnerabilities
It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute …
first Feb 2, 2023