8,437 results · Feed
-
High max 7.4USN-6293-1 1 CVE
heat vulnerability
It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data.
first Aug 16, 2023 -
High max 8.2USN-6306-1 7 CVEs
fastdds vulnerabilities
It was discovered that Fast DDS incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service and information exposure. This issue only affected Ubuntu 22.04 LTS. (CVE-2021-38425) It was discovered that Fast …
first Aug 24, 2023 -
High max 7.1USN-6295-1 1 CVE
libpod vulnerability
It was discovered that Podman incorrectly handled certain supplementary groups. An attacker could possibly use this issue to expose sensitive information or execute binary code.
first Aug 16, 2023 -
High max 7.6USN-6269-1 1 CVE
gst-plugins-good1.0 vulnerability
It was discovered that GStreamer Good Plugins incorrectly handled certain FLAC image tags. A remote attacker could use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-37327)
first Aug 2, 2023 -
High max 8.1USN-6449-1 8 CVEs
ffmpeg vulnerabilities
It was discovered that FFmpeg incorrectly managed memory resulting in a memory leak. An attacker could possibly use this issue to cause a denial of service via application crash. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-22038)…
first Oct 24, 2023 -
Critical max 9.8USN-5936-1 6 CVEs
samba vulnerabilities
Evgeny Legerov discovered that Samba incorrectly handled buffers in certain GSSAPI routines of Heimdal. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2022-3437) Tom Tervoort discovered that Sam…
first Mar 8, 2023 -
Critical max 9.8USN-6038-1 20 CVEs
golang-1.18 vulnerabilities
It was discovered that the Go net/http module incorrectly handled Transfer-Encoding headers in the HTTP/1 client. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. (CVE-2022-1705) It was discovered that Go did not pr…
first Apr 25, 2023 -
High max 7.7USN-5967-1 3 CVEs
node-object-path vulnerabilities
It was discovered that the set() method in object-path could be corrupted as a result of prototype pollution by sending a message to the parent process. An attacker could use this issue to cause object-path to crash. (CVE-2020-15256, CVE-2021-23434, CVE-2021-…
first Mar 22, 2023 -
High max 7.5USN-5844-1 8 CVEs
openssl vulnerabilities
David Benjamin discovered that OpenSSL incorrectly handled X.400 address processing. A remote attacker could possibly use this issue to read arbitrary memory contents or cause OpenSSL to crash, resulting in a denial of service. (CVE-2023-0286) Corey Bonnell d…
first Feb 7, 2023 -
Medium max 5.5USN-6126-1 2 CVEs
libvirt vulnerabilities
It was discovered that libvirt incorrectly handled the nwfilter driver. A local attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-0897) It was discovered th…
first May 31, 2023 -
UnscoredUSN-5864-1 14 CVEs
fig2dev vulnerabilities
Frederic Cambus discovered that Fig2dev incorrectly handled certain image files. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. T…
first Feb 13, 2023 -
High max 7.8USN-5847-1 3 CVEs
grunt vulnerabilities
It was discovered that Grunt was not properly loading YAML files before parsing them. An attacker could possibly use this issue to execute arbitrary code. (CVE-2020-7729) It was discovered that Grunt was not properly handling symbolic links when performing fi…
first Feb 7, 2023 -
High max 7.5USN-6183-1 2 CVEs
bind9 vulnerabilities
Shoham Danino, Anat Bremler-Barr, Yehuda Afek, and Yuval Shavitt discovered that Bind incorrectly handled the cache size limit. A remote attacker could possibly use this issue to consume memory, leading to a denial of service. (CVE-2023-2828) It was discovere…
first Jun 21, 2023 -
Critical max 9.8USN-5942-1 2 CVEs
apache2 vulnerabilities
Lars Krapf discovered that the Apache HTTP Server mod_proxy module incorrectly handled certain configurations. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. (CVE-2023-25690) Dimas Fariski Setyawan Putra discovere…
first Mar 9, 2023 -
UnscoredUSN-6178-1 2 CVEs
Several security issues were fixed in SVG++ library
It was discovered that in SVG++ library that the demo application incorrectly managed memory resulting in a memory access violation under certain circumstances. An attacker could possibly use this issue to leak memory information or run a denial of service at…
first Jun 19, 2023 -
UnscoredUSN-5903-1 2 CVEs
lighttpd vulnerabilities
It was discovered that lighttpd incorrectly handled certain inputs, which could result in a stack buffer overflow. A remote attacker could possibly use this issue to cause a denial of service (DoS). (CVE-2022-22707, CVE-2022-41556)
first Feb 28, 2023 -
Critical max 9.8USN-5824-1 29 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass secu…
first Feb 6, 2023 -
High max 7.5USN-6238-1 5 CVEs
samba vulnerabilities
It was discovered that Samba incorrectly handled Winbind NTLM authentication responses. An attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2022-2127) Andreas Schneider discovered that Samba incorrectly en…
first Jul 19, 2023 -
High max 7.8USN-6166-1 2 CVEs
libcap2 vulnerabilities
David Gstir discovered that libcap2 incorrectly handled certain return codes. An attacker could possibly use this issue to cause libcap2 to consume memory, leading to a denial of service. (CVE-2023-2602) Richard Weinberger discovered that libcap2 incorrectly …
first Jun 14, 2023 -
High max 8.8USN-6268-1 2 CVEs
gst-plugins-base1.0 vulnerabilities
It was discovered that GStreamer Base Plugins incorrectly handled certain FLAC image tags. A remote attacker could use this issue to cause GStreamer Base Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-37327) …
first Aug 2, 2023 -
Critical max 9.4USN-6102-1 3 CVEs
node-xmldom vulnerabilities
It was discovered that xmldom incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause unexpected syntactic changes during XML proce…
first May 24, 2023 -
Medium max 5.5USN-6200-2 2 CVEs
imagemagick vulnerabilities
USN-6200-1 fixed vulnerabilities in ImageMagick. Unfortunately these fixes were incomplete for Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. This update fixes the problem. Original advisory details: It was discovered that ImageMagick incorrectly handled the "-authe…
first Jul 25, 2024 -
Critical max 9.8USN-6242-1 1 CVE
openssh vulnerability
It was discovered that OpenSSH incorrectly handled loading certain PKCS#11 providers. If a user forwarded their ssh-agent to an untrusted system, a remote attacker could possibly use this issue to load arbitrary libraries from the user's system and execute ar…
first Jul 24, 2023 -
Critical max 9.8USN-6204-1 1 CVE
cpdb-libs vulnerability
Seth Arnold discovered that CPDB incorrectly handled certain characters. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first Jul 5, 2023 -
High max 7.5USN-6203-2 1 CVE
python-django vulnerability
USN-6203-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 ESM. Original advisory details: Seokchan Yoon discovered that Django incorrectly handled certain regular expressions. A remote attacker could possibly u…
first Jul 25, 2023 -
High max 7.5USN-6203-1 1 CVE
python-django vulnerability
Seokchan Yoon discovered that Django incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service.
first Jul 5, 2023 -
Critical max 9.8USN-6189-1 1 CVE
etcd vulnerability
It was discovered that etcd leaked credentials when debugging was enabled. This allowed remote attackers to discover etcd authentication credentials and possibly escalate privileges on systems using etcd.
first Jun 28, 2023 -
High max 7.5USN-6157-1 1 CVE
glusterfs vulnerability
Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could possibly use this issue to cause a denial of service.
first Jun 12, 2023 -
UnscoredUSN-6160-1 1 CVE
binutils vulnerability
It was discovered that GNU binutils incorrectly performed bounds checking operations when parsing stabs debugging information. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Jun 13, 2023 -
High max 8.8USN-6153-1 1 CVE
jupyter-core vulnerability
It was discovered that Jupyter Core executed untrusted files in the current working directory. An attacker could possibly use this issue to execute arbitrary code.
first Jun 12, 2023 -
High max 7.8USN-6137-1 2 CVEs
libraw vulnerabilities
It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of servi…
first Jun 5, 2023 -
High max 8.8USN-6156-1 1 CVE
sssd vulnerability
It was discovered that SSSD incorrrectly sanitized certificate data used in LDAP filters. When using this issue in combination with FreeIPA, a remote attacker could possibly use this issue to escalate privileges.
first Jun 12, 2023 -
Medium max 5.9USN-6288-1 11 CVEs
mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.34 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. In addition to security fixes, the updated pa…
first Aug 15, 2023 -
High max 7.5USN-7885-1 3 CVEs
openjdk-21 vulnerabilities
Jinfeng Guo discovered that the Security component of OpenJDK 21 did not correctly handle certain representations of encoded strings. An unauthenticated remote attacker could possibly use this issue to modify files or leak sensitive information. (CVE-2025-530…
first Nov 24, 2025 -
Medium max 6.5USN-6119-1 2 CVEs
openssl, openssl1.0 vulnerabilities
Matt Caswell discovered that OpenSSL incorrectly handled certain ASN.1 object identifiers. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service. (CVE-2023-2650) Anton Romanov discovered that O…
first May 30, 2023 -
High max 7.2USN-6104-1 2 CVEs
postgresql-10, postgresql-12, postgresql-14, postgresql-15 vulnerabilities
Alexander Lakhin discovered that PostgreSQL incorrectly handled certain CREATE privileges. An authenticated user could possibly use this issue to execute arbitrary code as the bootstrap supervisor. (CVE-2023-2454) Wolfgang Walther discovered that PostgreSQL i…
first May 24, 2023 -
High max 8.2USN-6068-1 1 CVE
openvswitch vulnerability
David Marchand discovered that Open vSwitch incorrectly handled IP packets with the protocol set to 0. A remote attacker could possibly use this issue to cause a denial of service.
first May 10, 2023 -
Critical max 9.1USN-6067-1 5 CVEs
neutron vulnerabilities
David Sinquin discovered that OpenStack Neutron incorrectly handled the default Open vSwitch firewall rules. An attacker could possibly use this issue to impersonate the IPv6 addresses of other systems on the network. This issue only affected Ubuntu 18.04 LTS…
first May 10, 2023 -
High max 7.5USN-6060-1 20 CVEs
mysql-5.7, mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.33 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 22.10, and Ubuntu 23.04. Ubuntu 18.04 LTS has been updat…
first May 8, 2023 -
High max 7.4USN-6066-1 1 CVE
heat vulnerability
It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data.
first May 10, 2023