1,181 results · Clear filters · Feed
-
Medium max 5.9USN-5817-1 1 CVE
python-setuptools, setuptools vulnerability
Sebastian Chnelik discovered that setuptools incorrectly handled certain regex inputs. An attacker could possibly use this issue to cause a denial of service.
first Jan 23, 2023 -
Medium max 6.5USN-5795-2 8 CVEs
net-snmp vulnerabilities
USN-5795-1 and 5543-1 fixed several vulnerabilities in Net-SNMP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Net-SNMP incorrectly handled certain requests. A remote…
first Jan 16, 2023 -
Medium max 6.5USN-5772-1 5 CVEs
qemu vulnerabilities
It was discovered that QEMU incorrectly handled bulk transfers from SPICE clients. A remote attacker could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM a…
first Dec 12, 2022 -
Medium max 5.9USN-5766-1 1 CVE
heimdal vulnerability
It was discovered that Heimdal did not properly manage memory when normalizing Unicode. An attacker could possibly use this issue to cause a denial of service.
first Dec 7, 2022 -
Medium max 5.5USN-5740-1 2 CVEs
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04, xwayland vulnerabilities
It was discovered that X.Org X Server incorrectly handled certain inputs. An attacker could use these issues to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Nov 23, 2022 -
Medium max 4.4USN-5736-1 17 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain values when processing PDF files. If a user or automated system using ImageMagick were tricked into opening a specially crafted PDF file, an attacker could exploit this to cause a denial of servic…
first Nov 24, 2022 -
Medium max 6.5USN-5704-1 3 CVEs
dbus vulnerabilities
It was discovered that DBus incorrectly handled messages with invalid type signatures. A local attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service. (CVE-2022-42010) It was discovered that DBus was incorrectly valida…
first Oct 27, 2022 -
Medium max 6.5USN-5690-1 1 CVE
libxdmcp vulnerability
It was discovered that libXdmcp was generating weak session keys. A local attacker could possibly use this issue to perform a brute force attack and obtain another user's key.
first Oct 19, 2022 -
Medium max 6.5USN-5658-3 2 CVEs
isc-dhcp vulnerabilities
USN-5658-1 fixed several vulnerabilities in DHCP. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that DHCP incorrectly handled option reference counting. A remote attacker could possibly use th…
first Nov 21, 2022 -
Medium max 5.5USN-5636-1 1 CVE
sosreport vulnerability
It was discovered that SoS incorrectly handled certain data. An attacker could possibly use this issue to expose sensitive information.
first Sep 26, 2022 -
Medium max 5.5USN-5619-1 7 CVEs
tiff vulnerabilities
It was discovered that LibTIFF was not properly performing the calculation of data that would eventually be used as a reference for bound-checking operations. An attacker could possibly use this issue to cause a denial of service or to expose sensitive inform…
first Sep 20, 2022 -
Medium max 5.3USN-5588-1 1 CVE
linux vulnerability
Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system cr…
first Aug 30, 2022 -
Medium max 5.3
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system cr…
first Aug 9, 2022 -
Medium max 6.7USN-5484-1 5 CVEs
linux vulnerabilities
It was discovered that the Linux kernel did not properly restrict access to the kernel debugger when booted in secure boot environments. A privileged attacker could use this to bypass UEFI Secure Boot restrictions. (CVE-2022-21499) It was discovered that a ra…
first Jun 16, 2022 -
Medium max 6.7USN-5463-2 7 CVEs
ntfs-3g vulnerabilities
USN-5463-1 fixed vulnerabilities in NTFS-3G. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Roman Fiedler discovered that NTFS-3G incorrectly handled certain return codes. A local attacker …
first Aug 2, 2022 -
Medium max 6.1USN-5421-1 5 CVEs
tiff vulnerabilities
It was discovered that LibTIFF incorrectly handled certain images. An attacker could possibly use this issue to cause a crash, resulting in a denial of service. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.…
first May 16, 2022 -
Medium max 6.5USN-5319-1 2 CVEs
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, ilinux-lts-xenial, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, and Cristiano Giuffrida discovered that hardware mitigations added by Intel to their processors to address Spectre-BTI were insufficient. A local attacker could potentially use this to expose sensitiv…
first Mar 9, 2022 -
Medium max 6.8USN-5332-2 1 CVE
bind9 vulnerability
USN-5332-1 fixed a vulnerability in Bind. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Xiang Li, Baojun Liu, Chaoyi Lu, and Changgen Zou discovered that Bind incorrectly handled certain bo…
first Mar 17, 2022 -
Medium max 6.1USN-5232-1 1 CVE
fail2ban vulnerability
Jakub Żoczek discovered that certain Fail2ban actions handled whois responses in an insecure way. If Fail2ban was configured to use certain mail actions like 'mail-whois' on a target system, a remote attacker who was able to control whois responses to this ta…
first Sep 12, 2022 -
Medium max 5.3USN-5126-2 1 CVE
bind9 vulnerability
USN-5126-1 fixed a vulnerability in Bind. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Kishore Kumar Kothapalli discovered that Bind incorrectly handled the lame cache when processing resp…
first Oct 28, 2021 -
Medium max 6.5USN-5077-2 2 CVEs
apport vulnerabilities
USN-5077-1 fixed several vulnerabilities in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Maik Münch and Stephen Röttger discovered that Apport incorrectly handled certain informati…
first Sep 14, 2021 -
Medium max 5.3USN-5006-2 5 CVEs
php5, php7.0 vulnerabilities
USN-5006-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that PHP incorrectly handled certain PHAR files. A remote attacker could pos…
first Jul 13, 2021 -
Medium max 5.7USN-4961-2 1 CVE
python-pip vulnerability
USN-4961-1 fixed a vulnerability in pip. This update provides the corresponding updates for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. Original advisory details: It was discovered that pip incorrectly handled unicode separators in git references…
first May 19, 2022 -
Medium max 5.5USN-4931-1 4 CVEs
samba vulnerabilities
Steven French discovered that Samba incorrectly handled ChangeNotify permissions. A remote attacker could possibly use this issue to obtain file name information. (CVE-2020-14318) Bas Alberts discovered that Samba incorrectly handled certain winbind requests.…
first May 3, 2021 -
Medium max 6.3USN-4874-1 1 CVE
ant vulnerability
It was discovered that Apache Ant created temporary files with insecure permissions. An attacker could use this vulnerability to read sensitive information leaked into /tmp, or potentially inject malicious code into a project that is built with Apache Ant.
first Mar 15, 2021 -
Medium max 6.1USN-4666-2 1 CVE
lxml vulnerability
USN-4666-1 partially fixed a vulnerability in lxml, but an additional patch was needed. This update provides the corresponding additional patch in order to properly fix the vulnerability. Original advisory details: It was discovered that lxml incorrectly hand…
first Dec 11, 2020 -
Medium max 6.1USN-4666-1 1 CVE
lxml vulnerability
It was discovered that lxml incorrectly handled certain HTML. An attacker could possibly use this issue to cross-site scripting (XSS) attacks.
first Dec 9, 2020 -
Medium max 6.4USN-4432-1 8 CVEs
grub2, grub2-signed vulnerabilities
Jesse Michael and Mickey Shkatov discovered that the configuration parser in GRUB2 did not properly exit when errors were discovered, resulting in heap-based buffer overflows. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Bo…
first Jul 29, 2020 -
Medium max 6.1USN-4277-1 3 CVEs
libexif vulnerabilities
Liu Bingchang discovered that libexif incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information or cause a denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04 LTS. …
first Feb 11, 2020 -
Medium max 5.3USN-4221-1 1 CVE
libpcap vulnerability
It was discovered that libpcap did not properly validate PHB headers in some situations. An attacker could use this to cause a denial of service (memory exhaustion).
first Dec 11, 2019 -
Medium max 6.7USN-4176-1 1 CVE
cpio vulnerability
Thomas Habets discovered that GNU cpio incorrectly handled certain inputs. An attacker could possibly use this issue to privilege escalation.
first Nov 6, 2019 -
Medium max 5.9USN-3977-2 4 CVEs
intel-microcode update
USN-3977-1 provided mitigations for Microarchitectural Data Sampling (MDS) vulnerabilities in Intel Microcode for a large number of Intel processor families. This update provides the corresponding updated microcode mitigations for Intel Cherry Trail and Bay T…
first May 22, 2019 -
Medium max 6.2USN-6543-1 1 CVE
tar vulnerability
It was discovered that tar incorrectly handled extended attributes in PAX archives. An attacker could use this issue to cause tar to crash, resulting in a denial of service.
first Dec 11, 2023 -
Medium max 5.5USN-6413-1 10 CVEs
binutils vulnerabilities
It was discovered that GNU binutils was not properly performing checks when dealing with memory allocation operations, which could lead to excessive memory consumption. An attacker could possibly use this issue to cause a denial of service. This issue only af…
first Oct 4, 2023 -
Medium max 5.1USN-7912-2 1 CVE
cups vulnerability
USN-7912-1 fixed vulnerabilities in CUPS. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: Johannes Meixner and Paul Zirnik discovered that CUPS incorrectly handled clients …
first Dec 4, 2025 -
Medium max 4.3USN-7904-1 2 CVEs
ghostscript vulnerabilities
Piotr Kajda discovered that Ghostscript incorrectly handled writing certain files. An attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service.
first Dec 3, 2025 -
Medium max 5.3USN-7899-1 11 CVEs
binutils vulnerabilities
It was discovered that GNU binutils could be forced to perform an out- of-bounds read in certain instances. An attacker with local access to a system could possibly use this issue to cause a denial of service. (CVE-2025-11839, CVE-2025-11840) It was discovere…
first Dec 1, 2025 -
Medium max 6.0USN-7897-1 1 CVE
cups vulnerability
It was discovered that CUPS incorrectly handled input from users in the web configuration settings. An attacker could use this issue to insert malicious configuration options, causing a denial of service or possibly executing arbitrary code.
first Nov 27, 2025 -
Medium max 4.3USN-7886-1 2 CVEs
python3.12, python3.11, python3.10, python3.9, python3.8, python3.7, python3.6, python3.5, python3.4 vulnerabilities
It was discovered that Python inefficiently handled expanding system environment variables. An attacker could possibly use this issue to cause Python to consume excessive resources, leading to a denial of service. (CVE-2025-6075) Caleb Brown discovered that P…
first Nov 24, 2025 -
Medium max 4.0USN-7878-1 3 CVEs
cups-filters vulnerabilities
It was discovered that cups-filters incorrectly handled certain malformed TIFF image files. A remote attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected U…
first Nov 20, 2025