8,437 results · Feed
-
Medium max 6.5USN-8051-1 6 CVEs
libssh vulnerabilities
It was discovered that libssh clients incorrectly handled the key exchange process. A remote attacker could possibly use this issue to cause libssh clients to crash, resulting in a denial of service. (CVE-2025-8277) It was discovered that the libssh SCP clien…
first Feb 18, 2026 -
UnscoredUSN-8248-2 2 CVEs
nasm regression
USN-8248-1 fixed vulnerabilities in NASM. Unfortunately the update introduced a regression which could cause NASM to crash. This update fixes the problem by reverting the fix for CVE-2021-33450 and CVE-2021-33452 in Ubuntu 24.04 LTS. We apologize for the inco…
first May 8, 2026 -
High max 7.8USN-8248-1 3 CVEs
nasm vulnerabilities
Daisy Chen discovered that NASM was vulnerable to a heap buffer overflow when handling certain input. An attacker could possibly use this issue to cause NASM to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-31722) It w…
first May 7, 2026 -
High max 7.5USN-8249-1 1 CVE
dpkg vulnerability
Yashashree Gund discovered that the dpkg dpkg-deb tool incorrectly handled certain zstd-compressed .deb archives. If a user or automated system were tricked into manipulating a specially crafted .deb archive, a remote attacker could possibly use this issue to…
first May 7, 2026 -
Medium max 4.2USN-8236-1 5 CVEs
slurm-wlm vulnerabilities
It was discovered that Slurm did not correctly handle certain file system operations. An attacker could possibly use this issue to modify files or leak sensitive information. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-41914) Ryan Hall discovered tha…
first May 6, 2026 -
High max 7.5USN-8231-1 1 CVE
python-dynaconf vulnerability
It was discovered that Dynaconf was incorrectly handling template evaluation in its string resolvers. A remote attacker could possibly use this issue to execute arbitrary code.
first May 6, 2026 -
UnscoredUSN-8206-1 1 CVE
libopenmpt vulnerability
Antonio Morales Maldonado discovered that OpenMPT did not properly limit the length of strings in certain cases, leading to a buffer overflow. An attacker could possibly use this issue to cause OpenMPT to crash, resulting in a denial of service.
first Apr 23, 2026 -
Critical max 9.3USN-8218-1 1 CVE
zulucrypt vulnerability
Aaron Rainbolt discovered that zuluCrypt used insecure PolicyKit settings in zuluPolkit. An attacker could possibly use this issue to cause local privilege escalation to root. (CVE-2025-53391)
first Apr 30, 2026 -
High max 7.5USN-3809-1 2 CVEs
openssh vulnerabilities
Robert Swiecki discovered that OpenSSH incorrectly handled certain messages. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-10708) It was discovered that OpenSS…
first Nov 6, 2018 -
High max 7.5USN-3826-1 10 CVEs
qemu vulnerabilities
Daniel Shapira and Arash Tohidi discovered that QEMU incorrectly handled NE2000 device emulation. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2018-10839) It was discovered that QEMU incorrec…
first Nov 26, 2018 -
Medium max 5.3USN-8225-1 2 CVEs
python-marshmallow vulnerabilities
Jared Deckard discovered that Python marshmallow did not correctly handle hiding certain fields. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-17175) It was discovered that Python…
-
High max 8.0USN-8217-1 4 CVEs
node-follow-redirects vulnerabilities
It was discovered that follow-redirects did not properly protect sensitive user information during redirects. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-…
first Apr 28, 2026 -
Medium max 5.3USN-8136-2 1 CVE
dovecot regression
USN-8136-1 fixed vulnerabilities in Dovecot. The update caused a regression on Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Dovecot incorrectly hand…
first Apr 28, 2026 -
Medium max 6.7USN-8193-1 1 CVE
libcap2 vulnerability
Ali Raza discovered that libcap incorrectly handled file capability updates. A local attacker could possibly use this issue to inject or strip capabilities into arbitrary executables and escalate privileges.
first Apr 21, 2026 -
UnscoredUSN-8195-1 0 CVEs
packagekit vulnerability
It was discovered that PackageKit incorrectly handled certain transactions. A local attacker could use this issue to install arbitrary packages as root, possibly resulting in privilege escalation.
first Apr 22, 2026 -
High max 7.5USN-5550-1 2 CVEs
gnutls28 vulnerabilities
It was discovered that GnuTLS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021…
first Aug 4, 2022 -
High max 7.5USN-5388-2 6 CVEs
openjdk-17 vulnerabilities
It was discovered that OpenJDK incorrectly verified ECDSA signatures. An attacker could use this issue to bypass the signature verification process. (CVE-2022-21449) It was discovered that OpenJDK incorrectly limited memory when compiling a specially crafted …
first Apr 26, 2022 -
High max 7.5USN-5138-1 1 CVE
python-py vulnerability
The py.path.svnwc component of py (aka python-py) through v1.9.0 contains a regular expression with an ambiguous subpattern that is susceptible to catastrophic backtracing. This could be used by attackers to cause a compute-time denial of service attack by su…
first Nov 10, 2021 -
High max 7.8USN-5547-1 3 CVEs
nvidia-graphics-drivers-390, nvidia-graphics-drivers-450-server, nvidia-graphics-drivers-470, nvidia-graphics-drivers-470-server, nvidia-graphics-drivers-510, nvidia-graphics-drivers-510-server, nvidia-graphics-drivers-515, nvidia-graphics-drivers-515-server vulnerabilities
Le Wu discovered that the NVIDIA graphics drivers did not properly perform input validation in some situations. A local user could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2022-31607) Tal Lossos discovered that the NVIDIA…
first Aug 3, 2022 -
UnscoredUSN-5531-1 1 CVE
protobuf-c vulnerability
Pietro Borrello discovered that protobuf-c contained an invalid arithmetic shift. This vulnerability allowed attackers to cause a denial of service (system crash) via unspecified vectors (CVE-2022-33070). It was discovered that protobuf-c contained an unsigne…
first Jul 26, 2022 -
Medium max 6.5USN-5537-1 18 CVEs
mysql-5.7, mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.30 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Ubuntu 18.04 LTS has been updated to MySQL 5.7.39. In additi…
first Jul 28, 2022 -
UnscoredUSN-5431-1 1 CVE
gnupg2 vulnerability
It was discovered that GnuPG was not properly processing keys with large amounts of signatures. An attacker could possibly use this issue to cause a denial of service.
first May 30, 2022 -
UnscoredUSN-5274-1 2 CVEs
libsdl2 vulnerabilities
It was discovered that Simple DirectMedia Layer library incorrectly handled memory when parsing certain specially crafted .BMP files. An attacker could possibly use these issues to crash the application or execute arbitrary code.
first Feb 7, 2022 -
Critical max 9.8USN-5310-1 12 CVEs
glibc vulnerabilities
Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could possibly use this issue to cause the GNU C Library to hang or crash, resulting in a denial of service. Thi…
first Mar 1, 2022 -
UnscoredUSN-5142-1 9 CVEs
samba vulnerabilities
Stefan Metzmacher discovered that Samba incorrectly handled SMB1 client connections. A remote attacker could possibly use this issue to downgrade connections to plaintext authentication. (CVE-2016-2124) Andrew Bartlett discovered that Samba incorrectly mappin…
first Nov 11, 2021 -
High max 8.8USN-5260-1 3 CVEs
samba vulnerabilities
Orange Tsai discovered that the Samba vfs_fruit module incorrectly handled certain memory operations. A remote attacker could use this issue to cause Samba to crash, resulting in a denial of service, or possibly execute arbitrary code as root. (CVE-2021-44142…
first Feb 1, 2022 -
UnscoredUSN-5426-1 1 CVE
needrestart vulnerability
Jakub Wilk discovered that needrestart incorrectly used some regular expressions. A local attacker could possibly use this issue to execute arbitrary code.
first May 17, 2022 -
Medium max 5.4USN-5134-1 1 CVE
docker.io vulnerability
An information disclosure issue was discovered in the command line interface of Docker. A misconfigured credential store could result in supplied credentials being leaked to the public registry, when using the docker login command with a private registry.
first Nov 9, 2021 -
Medium max 6.4USN-8194-1 3 CVEs
php-league-commonmark vulnerabilities
It was discovered that league/commonmark did not properly restrict unsafe attributes when the Attributes extension was enabled. An attacker could possibly use this issue to cause cross-site scripting by injecting malicious code into rendered HTML. This issue …
first Apr 21, 2026 -
UnscoredUSN-5556-1 1 CVE
booth vulnerability
It was discovered that Booth incorrectly handled user authentication. An attacker could use this vulnerability to cause a denial of service.
first Aug 9, 2022 -
UnscoredUSN-5307-1 11 CVEs
qemu vulnerabilities
Gaoning Pan discovered that QEMU incorrectly handled the floppy disk emulator. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. (CVE-2021-20196) Gaoning Pan discovered that the QEMU vmxnet3 NIC emulat…
first Feb 28, 2022 -
Medium max 5.5USN-4450-1 3 CVEs
whoopsie vulnerabilities
Seong-Joong Kim discovered that Whoopsie incorrectly handled memory. A local attacker could use this issue to cause Whoopsie to consume memory, resulting in a denial of service. (CVE-2020-11937) Seong-Joong Kim discovered that Whoopsie incorrectly handled par…
first Aug 4, 2020 -
Medium max 6.5USN-4981-1 7 CVEs
squid, squid3 vulnerabilities
Joshua Rogers discovered that Squid incorrectly handled requests with the urn: scheme. A remote attacker could possibly use this issue to cause Squid to consume resources, leading to a denial of service. (CVE-2021-28651) Joshua Rogers discovered that Squid in…
first Jun 3, 2021 -
High max 7.5USN-4416-1 11 CVEs
glibc vulnerabilities
Florian Weimer discovered that the GNU C Library incorrectly handled certain memory operations. A remote attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only a…
first Jul 6, 2020 -
Critical max 9.8USN-4639-1 14 CVEs
phpmyadmin vulnerabilities
It was discovered that there was a bug in the way phpMyAdmin handles the phpMyAdmin Configuration Storage tables. An authenticated attacker could use this vulnerability to cause phpmyAdmin to leak sensitive files. (CVE-2018-19968) It was discovered that phpMy…
first Nov 19, 2020 -
Critical max 9.8USN-8154-1 5 CVEs
python-django vulnerabilities
Seokchan Yoon discovered that Django incorrectly handled copying memory when parsing multipart uploads with excessive whitespace. A remote attacker could possibly use this issue to cause Django to use excessive resources, leading to a denial of service. (CVE-…
first Apr 7, 2026 -
UnscoredUSN-8196-1 0 CVEs
strongswan vulnerabilities
Haruto Kimura discovered that strongSwan incorrectly handled the supported_versions extension in TLS. A remote attacker could possibly use this issue to cause strongSwan to stop responding, resulting in a denial of service. (CVE-2026-35328) Haruto Kimura disc…
first Apr 22, 2026 -
UnscoredUSN-4376-2 3 CVEs
openssl vulnerabilities
USN-4376-1 fixed several vulnerabilities in OpenSSL. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Cesar Pereida García, Sohaib ul Hassan, Nicola Tuveri, Iaroslav Gridin, Alejandro Cabrera …
first Jul 9, 2020 -
Medium max 6.5USN-4952-1 33 CVEs
mysql-5.7, mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.25 in Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. Ubuntu 18.04 LTS has been updated to MySQL 5.7.34…
first May 12, 2021 -
High max 8.1USN-4954-1 2 CVEs
glibc vulnerabilities
Jason Royes and Samuel Dytrych discovered that the memcpy() implementation for 32 bit ARM processors in the GNU C Library contained an integer underflow vulnerability. An attacker could possibly use this to cause a denial of service (application crash) or exe…
first May 14, 2021