8,437 results · Feed
-
High max 7.5USN-5845-1 2 CVEs
openssl1.0 vulnerabilities
David Benjamin discovered that OpenSSL incorrectly handled X.400 address processing. A remote attacker could possibly use this issue to read arbitrary memory contents or cause OpenSSL to crash, resulting in a denial of service. (CVE-2023-0286) Octavio Galland…
first Feb 7, 2023 -
Medium max 6.5USN-5852-1 1 CVE
swift vulnerability
It was discovered that OpenStack Swift incorrectly handled certain XML files. A remote authenticated user could possibly use this issue to obtain arbitrary file contents containing sensitive information from the server.
first Feb 9, 2023 -
Critical max 9.0USN-5839-1 3 CVEs
apache2 vulnerabilities
It was discovered that the Apache HTTP Server mod_dav module incorrectly handled certain If: request headers. A remote attacker could possibly use this issue to cause the server to crash, resulting in a denial of service. (CVE-2006-20001) ZeddYu_Lu discovered…
first Feb 1, 2023 -
Medium max 5.7USN-5835-4 1 CVE
cinder vulnerability
USN-5835-1 fixed vulnerabilities in Cinder. This update provides the corresponding updates for Ubuntu 18.04 LTS. In addition, a regression was fixed for Ubuntu 20.04 LTS. Original advisory details: Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Ra…
first Feb 9, 2023 -
Medium max 5.7USN-5835-3 1 CVE
nova vulnerability
Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou discovered that Nova incorrectly handled VMDK image processing. An authenticated attacker could possibly supply a specially crafted VMDK flat image and obtain arbitrary files from the server co…
first Jan 31, 2023 -
High max 7.5USN-6233-2 3 CVEs
yajl vulnerabilities
USN-6233-1 fixed vulnerabilities in YAJL. This update provides the corresponding updates for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. Original advisory details: It was discovered that YAJL was not properly performing bounds checks when decoding a…
first Dec 14, 2023 -
High max 7.5USN-5837-1 1 CVE
python-django vulnerability
Nick Pope discovered that Django incorrectly handled certain Accept-Language headers. A remote attacker could possibly use this issue to cause Django to consume memory, leading to a denial of service.
first Feb 1, 2023 -
UnscoredUSN-5826-1 2 CVEs
privoxy vulnerabilities
Joshua Rogers discovered that Privoxy incorrectly handled memory allocation. An attacker could possibly use this issue to cause a denial of service. (CVE-2021-44540) Artem Ivanov discovered that Privoxy incorrectly handled input validations. An attacker could…
first Jan 25, 2023 -
Medium max 5.7USN-5835-5 1 CVE
nova vulnerability
USN-5835-3 fixed vulnerabilities in Nova. This update provides the corresponding updates for Ubuntu 18.04 LTS. Original advisory details: Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou discovered that Nova incorrectly handled VMDK image pro…
first Feb 9, 2023 -
Critical max 9.1USN-5818-1 1 CVE
php7.2, php7.4, php8.1 vulnerability
It was discovered that PHP incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first Jan 23, 2023 -
Medium max 5.7USN-5835-2 1 CVE
glance vulnerability
Guillaume Espanel, Pierre Libeau, Arnaud Morin, and Damien Rannou discovered that OpenStack Glance incorrectly handled VMDK image processing. An authenticated attacker could possibly supply a specially crafted VMDK flat image and obtain arbitrary files from t…
first Jan 31, 2023 -
High max 8.8USN-5807-1 3 CVEs
libxpm vulnerabilities
Martin Ettl discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM file, a remote attacker could possibly use this issue to cause libXpm to stop responding, resulting in a …
first Jan 17, 2023 -
High max 8.8USN-5806-2 1 CVE
ruby2.5, ruby3.0 vulnerability
USN-5806-1 fixed vulnerabilities in Ruby. This update fixes the problem for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.10. Original advisory details: Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications whic…
first Jan 23, 2023 -
Medium max 5.5USN-5786-1 1 CVE
nautilus vulnerability
It was discovered that GNOME Files incorrectly handled certain filenames. An attacker could possibly use this issue to cause GNOME Files to crash, leading to a denial of service.
first Jan 5, 2023 -
High max 8.8USN-5806-3 1 CVE
ruby2.7 vulnerability
USN-5806-1 fixed vulnerabilities in Ruby. This update fixes the problem for Ubuntu 20.04 LTS. Original advisory details: Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications which generate HTTP responses using cgi …
first Mar 20, 2023 -
UnscoredUSN-5796-1 1 CVE
w3m vulnerability
It was discovered that w3m incorrectly handled certain HTML files. A remote attacker could use this issue to cause w3m to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jan 9, 2023 -
Critical max 9.8USN-5767-3 1 CVE
python3.6 vulnerability
USN-5767-1 fixed vulnerabilities in Python. This update fixes the problem for Ubuntu 18.04 LTS. Original advisory details: Nicky Mouha discovered that Python incorrectly handled certain SHA-3 internals. An attacker could possibly use this issue to cause a cra…
first Mar 6, 2023 -
Critical max 9.8USN-5767-1 2 CVEs
python2.7, python3.10, python3.6, python3.8 vulnerabilities
Nicky Mouha discovered that Python incorrectly handled certain SHA-3 internals. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2022-37454) It was discovered that Python incorrectly handled certain IDNA inputs. An at…
first Dec 8, 2022 -
High max 7.5USN-5732-1 1 CVE
unbound vulnerability
It was discovered that Unbound incorrectly handled delegations with a large number of non-responsive nameservers. A remote attacker could possibly use this issue to cause Unbound to consume resources, leading to a denial of service.
first Nov 17, 2022 -
UnscoredUSN-5715-1 5 CVEs
libraw vulnerabilities
It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of servi…
first Nov 7, 2022 -
UnscoredUSN-5725-1 1 CVE
golang-1.13 vulnerability
Diederik Loerakker, Jonny Rhea, Raúl Kripalani, and Preston Van Loon discovered that Go incorrectly handled certain inputs. An attacker could possibly use this issue to cause Go applications to hang or crash, resulting in a denial of service.
first Nov 15, 2022 -
High max 7.5USN-5716-1 1 CVE
sqlite3 vulnerability
It was discovered that SQLite incorrectly handled certain long string arguments. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Nov 7, 2022 -
Medium max 5.9USN-5697-1 1 CVE
barbican vulnerability
Douglas Mendizabal discovered that Barbican incorrectly handled certain query strings. A remote attacker could possibly use this issue to bypass the access policy.
first Oct 25, 2022 -
High max 7.8USN-5713-1 1 CVE
python3.10 vulnerability
Devin Jeanpierre discovered that Python incorrectly handled sockets when the multiprocessing module was being used. A local attacker could possibly use this issue to execute arbitrary code and escalate privileges.
first Nov 3, 2022 -
Medium max 6.5USN-5696-1 16 CVEs
mysql-5.7, mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.31 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Ubuntu 18.04 LTS has been updated to MySQL 5.7.40. In additi…
first Oct 24, 2022 -
UnscoredUSN-5627-1 2 CVEs
pcre2 vulnerabilities
It was discovered that PCRE incorrectly handled memory when handling certain regular expressions. An attacker could possibly use this issue to cause applications using PCRE to expose sensitive information.
first Sep 22, 2022 -
High max 7.7USN-5764-1 7 CVEs
u-boot vulnerabilities
It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-2347) Nicolas Bidron and …
first Dec 6, 2022 -
UnscoredUSN-5627-2 2 CVEs
pcre2 vulnerabilities
USN-5627-1 fixed several vulnerabilities in PCRE. This update provides the corresponding fixes for Ubuntu 18.04 ESM. Original advisory details: It was discovered that PCRE incorrectly handled memory when handling certain regular expressions. An attacker could…
first Sep 22, 2022 -
High max 7.5USN-5651-1 1 CVE
strongswan vulnerability
Lahav Schlesinger discovered that strongSwan incorrectly handled certain OCSP URIs and and CRL distribution points (CDP) in certificates. A remote attacker could possibly use this issue to initiate IKE_SAs and send crafted certificates that contain URIs point…
first Oct 3, 2022 -
High max 8.1USN-5638-2 2 CVEs
expat vulnerabilities
USN-5638-1 fixed a vulnerability in Expat. This update provides the corresponding updates for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. It was discovered that Expat incorrectly handled memory in out-of-memory situations. An attacker could possi…
first Nov 17, 2022 -
Critical max 9.8USN-5227-1 5 CVEs
pillow vulnerabilities
It was discovered that Pillow incorrectly handled certain image files. If a user or automated system were tricked into opening a specially-crafted file, a remote attacker could cause Pillow to hang, resulting in a denial of service. (CVE-2021-23437) It was di…
first Jan 13, 2022 -
High max 7.7USN-5628-2 4 CVEs
etcd vulnerabilities
USN-5628-1 fixed vulnerabilities in etcd. This update provides the corresponding updates for Ubuntu 18.04 ESM. Original advisory details: It was discovered that etcd incorrectly handled certain specially crafted WAL files. An attacker could possibly use this …
first Sep 22, 2022 -
UnscoredUSN-5327-1 1 CVE
netkit-rsh vulnerability
Hiroyuki Yamamori discovered that rsh incorrectly handled certain filenames. If a user or automated system were tricked into connecting to a malicious rsh server, a remote attacker could possibly use this issue to modify directory permissions.
first Mar 15, 2022 -
High max 7.7USN-5628-1 4 CVEs
etcd vulnerabilities
It was discovered that etcd incorrectly handled certain specially crafted WAL files. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-15106, CVE-2020-15112) It was discovered that etcd incorrectly handled directory permissions…
first Sep 22, 2022 -
High max 7.6USN-5340-1 6 CVEs
ckeditor vulnerabilities
Kyaw Min Thein discovered that CKEditor incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affects Ubuntu 18.04 LTS. (CVE-2018-9861) Micha Bentkowski discovered that CKEditor incorrectly ha…
first Mar 22, 2022 -
UnscoredUSN-5474-1 4 CVEs
varnish vulnerabilities
It was dicovered that Varnish Cache did not clear a pointer between the handling of one client request and the next request within the same connection. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2019-20637) It was di…
first Jun 8, 2022 -
High max 7.5USN-5360-1 7 CVEs
tomcat9 vulnerabilities
It was discovered that Tomcat incorrectly performed input verification. A remote attacker could possibly use this issue to intercept sensitive information. (CVE-2020-13943, CVE-2020-17527, CVE-2021-25122, CVE-2021-30640) It was discovered that Tomcat did not …
first Mar 31, 2022 -
High max 7.5USN-5354-1 2 CVEs
twisted vulnerabilities
It was discovered that Twisted incorrectly filtered HTTP headers when clients are being redirected to another origin. A remote attacker could use this issue to obtain sensitive information. (CVE-2022-21712) It was discovered that Twisted incorrectly processed…
first Mar 30, 2022 -
UnscoredUSN-5489-1 7 CVEs
qemu vulnerabilities
Alexander Bulekov discovered that QEMU incorrectly handled floppy disk emulation. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly leak sensitive information. (CVE-2021-3507) It …
first Jun 21, 2022 -
UnscoredUSN-5476-1 2 CVEs
liblouis vulnerabilities
Han Zheng discovered that Liblouis incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. This issue was addressed in Ubuntu 21.10 and Ubuntu 22.04 LTS. (CVE-2022-26981) It was discovered that Liblouis incorrectly hand…
first Jun 13, 2022