8,437 results · Feed
-
High max 7.8USN-6798-1 1 CVE
gst-plugins-base1.0 vulnerability
It was discovered that GStreamer Base Plugins incorrectly handled certain EXIF metadata. An attacker could possibly use this issue to execute arbitrary code or cause a crash.
first May 29, 2024 -
High max 7.5USN-6791-1 1 CVE
unbound vulnerability
It was discovered that Unbound could take part in a denial of service amplification attack known as DNSBomb. This update introduces certain resource limits to make the impact from Unbound significantly lower.
first May 28, 2024 -
Low max 3.7USN-6812-1 4 CVEs
openjdk-17 vulnerabilities
It was discovered that the Hotspot component of OpenJDK 17 incorrectly handled certain exceptions with specially crafted long messages. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-21011) It was discovered that OpenJDK 17 …
first Jun 6, 2024 -
Low max 3.7USN-6813-1 4 CVEs
openjdk-21 vulnerabilities
It was discovered that the Hotspot component of OpenJDK 21 incorrectly handled certain exceptions with specially crafted long messages. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-21011) It was discovered that OpenJDK 21 …
first Jun 6, 2024 -
Medium max 6.4USN-6796-1 2 CVEs
tpm2-tss vulnerabilities
Fergus Dall discovered that TPM2 Software Stack did not properly handle layer arrays. An attacker could possibly use this issue to cause TPM2 Software Stack to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-22745) Jurge…
first May 29, 2024 -
Medium max 6.3USN-6801-1 1 CVE
python-pymysql vulnerability
It was discovered that PyMySQL incorrectly escaped untrusted JSON input. An attacker could possibly use this issue to perform SQL injection attacks.
first May 30, 2024 -
High max 7.4USN-6790-1 1 CVE
amavisd-new vulnerability
It was discovered that amavisd-new incorrectly handled certain MIME email messages with multiple boundary parameters. A remote attacker could possibly use this issue to bypass checks for banned files or malware.
first May 28, 2024 -
Critical max 10.0USN-6786-1 1 CVE
netatalk vulnerabilities
It was discovered that Netatalk did not properly protect an SMB and AFP default configuration. A remote attacker could possibly use this issue to execute arbitrary code.
first May 28, 2024 -
High max 7.6USN-6784-1 3 CVEs
cjson vulnerabilities
It was discovered that cJSON incorrectly handled certain input. An attacker could possibly use this issue to cause cJSON to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 23.10. (CVE-2023-50471, CVE-2023-50472) L…
first May 23, 2024 -
High max 7.3USN-6737-2 1 CVE
glibc vulnerability
USN-6737-1 fixed a vulnerability in the GNU C Library. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: Charles Fol discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An a…
first Apr 29, 2024 -
Medium max 5.2USN-6768-1 1 CVE
glib2.0 vulnerability
Alicia Boya García discovered that GLib incorrectly handled signal subscriptions. A local attacker could use this issue to spoof D-Bus signals resulting in a variety of impacts including possible privilege escalation.
first May 9, 2024 -
High max 7.5USN-6746-2 1 CVE
google-guest-agent, google-osconfig-agent vulnerability
USN-6746-1 fixed vulnerabilities in Google Guest Agent and Google OS Config Agent. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Google Guest Agent and Google OS Config Agent incorrectly …
first Jun 25, 2024 -
Critical max 9.8USN-6752-1 4 CVEs
freerdp2 vulnerabilities
It was discovered that FreeRDP incorrectly handled certain memory operations. If a user were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to cause FreeRDP to crash, resulting in a denial of service.
first Apr 25, 2024 -
High max 7.1USN-6758-1 1 CVE
node-json5 vulnerability
It was discovered that the JSON5 parse method incorrectly handled the parsing of keys named \_\_proto\_\_. An attacker could possibly use this issue to pollute the prototype of the returned object, setting arbitrary or unexpected keys, and cause a denial of s…
first Apr 30, 2024 -
Medium max 5.3USN-6841-1 1 CVE
php7.4, php8.1, php8.2, php8.3 vulnerability
It was discovered that PHP could early return in the filter_var function resulting in invalid user information being treated as valid user information. An attacker could possibly use this issue to expose raw user input information.
first Jun 19, 2024 -
High max 7.3USN-6737-1 1 CVE
glibc vulnerability
Charles Fol discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Apr 18, 2024 -
Critical max 9.8USN-6749-1 7 CVEs
freerdp2 vulnerabilities
It was discovered that FreeRDP incorrectly handled certain context resets. If a user were tricked into connecting to a malicious server, a remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute ar…
first Apr 24, 2024 -
High max 7.5USN-6729-3 3 CVEs
apache2 vulnerabilities
USN-6729-1 fixed vulnerabilities in Apache HTTP Server. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: Orange Tsai discovered that the Apache HTTP Server incorrectly handled validating certain input. A remote a…
first Apr 29, 2024 -
Medium max 6.5USN-6727-1 3 CVEs
nss vulnerabilities
It was discovered that NSS incorrectly handled padding when checking PKCS#1 certificates. A remote attacker could possibly use this issue to perform Bleichenbacher-like attacks and recover private data. This issue only affected Ubuntu 20.04 LTS. (CVE-2023-442…
first Apr 10, 2024 -
Medium max 6.2USN-6734-2 2 CVEs
libvirt vulnerabilities
USN-6734-1 fixed vulnerabilities in libvirt. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: Alexander Kuznetsov discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this…
first Apr 29, 2024 -
High max 7.5USN-6746-1 1 CVE
google-guest-agent, google-osconfig-agent vulnerability
It was discovered that Google Guest Agent and Google OS Config Agent incorrectly handled certain JSON files. An attacker could possibly use this issue to cause a denial of service.
first Apr 23, 2024 -
High max 7.5USN-6729-1 3 CVEs
apache2 vulnerabilities
Orange Tsai discovered that the Apache HTTP Server incorrectly handled validating certain input. A remote attacker could possibly use this issue to perform HTTP request splitting attacks. (CVE-2023-38709) Keran Mu and Jianjun Chen discovered that the Apache H…
first Apr 11, 2024 -
Medium max 6.2USN-6734-1 3 CVEs
libvirt vulnerabilities
Alexander Kuznetsov discovered that libvirt incorrectly handled certain API calls. An attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. (CVE-2024-1441) It was discovered that libvirt incorrectly handled certai…
first Apr 15, 2024 -
High max 8.6USN-6728-3 2 CVEs
squid vulnerability
USN-6728-1 fixed vulnerabilities in Squid. The fix for CVE-2023-5824 caused Squid to crash in certain environments on Ubuntu 20.04 LTS and was disabled in USN-6728-2. The problematic fix for CVE-2023-5824 has now been corrected and reinstated in this update. …
first Apr 23, 2024 -
Critical max 9.8USN-6720-1 1 CVE
cacti vulnerability
Kentaro Kawane discovered that Cacti incorrectly handled user provided input sent through request parameters to the graph_view.php script. A remote authenticated attacker could use this issue to perform SQL injection attacks.
first Apr 2, 2024 -
Low max 3.3USN-6719-1 1 CVE
util-linux vulnerability
Skyler Ferrante discovered that the util-linux wall command did not filter escape sequences from command line arguments. A local attacker could possibly use this issue to obtain sensitive information.
first Mar 27, 2024 -
Medium max 6.3USN-6712-1 1 CVE
libnet-cidr-lite-perl vulnerability
It was discovered that Net::CIDR::Lite incorrectly handled extra zero characters at the beginning of IP address strings. A remote attacker could possibly use this issue to bypass access controls.
first Mar 25, 2024 -
Medium max 5.5USN-6709-1 4 CVEs
openssl1.0 vulnerabilities
It was discovered that checking excessively long DH keys or parameters may be very slow. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service. (CVE-2023-3446) After the fix for CVE-2023-3446 B…
first Mar 21, 2024 -
Low max 3.3USN-6719-2 1 CVE
util-linux vulnerability
USN-6719-1 fixed a vulnerability in util-linux. Unfortunately, it was discovered that the fix did not fully address the issue. This update removes the setgid permission bit from the wall and write utilities. Original advisory details: Skyler Ferrante discover…
first Apr 10, 2024 -
High max 7.8USN-6711-1 1 CVE
crmsh vulnerability
Vincent Berg discovered that CRM shell incorrectly handled certain commands. An local attacker could possibly use this issue to execute arbitrary code via shell code injection to the crm history commandline.
first Mar 25, 2024 -
Low max 3.7USN-6811-1 5 CVEs
openjdk-lts vulnerabilities
It was discovered that the Hotspot component of OpenJDK 11 incorrectly handled certain exceptions with specially crafted long messages. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-21011) It was discovered that OpenJDK 11 …
first Jun 6, 2024 -
UnscoredUSN-6687-1 1 CVE
accountsservice vulnerability
It was discovered that AccountsService called a helper incorrectly when performing password change operations. A local attacker could possibly use this issue to obtain encrypted passwords.
first Mar 11, 2024 -
High max 7.4USN-6696-1 6 CVEs
openjdk-8 vulnerabilities
Yi Yang discovered that the Hotspot component of OpenJDK 8 incorrectly handled array accesses in the C1 compiler. An attacker could possibly use this issue to cause a denial of service, execute arbitrary code or bypass Java sandbox restrictions. (CVE-2024-209…
first Mar 18, 2024 -
High max 7.5USN-6694-1 2 CVEs
expat vulnerabilities
It was discovered that Expat could be made to consume large amounts of resources. If a user or automated system were tricked into processing specially crafted input, an attacker could possibly use this issue to cause a denial of service. (CVE-2023-52425, CVE-…
first Mar 14, 2024 -
Medium max 5.3USN-6674-2 1 CVE
python-django vulnerability
USN-6674-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Seokchan Yoon discovered that the Django Truncator function incorrectly handled very long HTML input. A remote attacker …
first Mar 4, 2024 -
High max 7.4USN-6660-1 6 CVEs
openjdk-lts vulnerabilities
Yi Yang discovered that the Hotspot component of OpenJDK 11 incorrectly handled array accesses in the C1 compiler. An attacker could possibly use this issue to cause a denial of service, execute arbitrary code or bypass Java sandbox restrictions. (CVE-2024-20…
first Feb 27, 2024 -
High max 7.4USN-6662-1 5 CVEs
openjdk-21 vulnerabilities
Yi Yang discovered that the Hotspot component of OpenJDK 21 incorrectly handled array accesses in the C1 compiler. An attacker could possibly use this issue to cause a denial of service, execute arbitrary code or bypass Java sandbox restrictions. (CVE-2024-20…
first Feb 27, 2024 -
High max 8.0USN-6656-1 1 CVE
postgresql-12, postgresql-14, postgresql-15 vulnerability
It was discovered that PostgreSQL incorrectly handled dropping privileges when handling REFRESH MATERIALIZED VIEW CONCURRENTLY commands. If a user or automatic system were tricked into running a specially crafted command, a remote attacker could possibly use …
first Feb 26, 2024 -
Medium max 5.3USN-6674-1 1 CVE
python-django vulnerability
Seokchan Yoon discovered that the Django Truncator function incorrectly handled very long HTML input. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service.
first Mar 4, 2024 -
High max 7.5USN-6670-1 2 CVEs
php-guzzlehttp-psr7 vulnerabilities
It was discovered that php-guzzlehttp-psr7 incorrectly parsed HTTP headers. A remote attacker could possibly use these issues to perform an HTTP header injection attack.
first Feb 29, 2024