8,437 results · Feed
-
UnscoredUSN-4685-1 8 CVEs
openjpeg2 vulnerabilities
It was discovered that OpenJPEG incorrectly handled certain image data. An attacker could use this issue to cause OpenJPEG to crash, leading to a denial of service, or possibly execute arbitrary code.
first Jan 7, 2021 -
UnscoredUSN-4547-1 12 CVEs
italc vulnerabilities
It was discovered that an information disclosure vulnerability existed in the LibVNCServer vendored in iTALC when sending a ServerCutText message. An attacker could possibly use this issue to expose sensitive information. (CVE-2019-15681) It was discovered th…
first Sep 28, 2020 -
Medium max 5.0USN-4467-1 13 CVEs
qemu vulnerabilities
Ziming Zhang and VictorV discovered that the QEMU SLiRP networking implementation incorrectly handled replying to certain ICMP echo requests. An attacker inside a guest could possibly use this issue to leak host memory to obtain sensitive information. This is…
first Aug 19, 2020 -
High max 7.8USN-4269-1 5 CVEs
systemd vulnerabilities
It was discovered that systemd incorrectly handled certain PIDFile files. A local attacker could possibly use this issue to trick systemd into killing privileged processes. This issue only affected Ubuntu 16.04 LTS. (CVE-2018-16888) It was discovered that sys…
first Feb 5, 2020 -
High max 8.1USN-4257-1 8 CVEs
openjdk-8, openjdk-lts vulnerabilities
It was discovered that OpenJDK incorrectly handled exceptions during deserialization in BeanContextSupport. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2020-2583) It was discovered that OpenJDK inco…
first Jan 28, 2020 -
UnscoredUSN-4725-1 6 CVEs
qemu vulnerabilities
It was discovered that QEMU incorrectly handled memory in iSCSI emulation. An attacker inside the guest could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2020…
first Feb 8, 2021 -
Critical max 9.8
tomcat6 vulnerabilities
It was discovered that the Tomcat realm implementations incorrectly handled passwords when a username didn't exist. A remote attacker could possibly use this issue to enumerate usernames. (CVE-2016-0762) Alvaro Munoz and Alexander Mirosh discovered that Tomca…
first Sep 30, 2020 -
UnscoredUSN-4434-1 12 CVEs
libvncserver vulnerabilities
Ramin Farajpour Cami discovered that LibVNCServer incorrectly handled certain malformed unix socket names. A remote attacker could exploit this with a crafted socket name, leading to a denial of service, or possibly execute arbitrary code. (CVE-2019-20839) It…
first Jul 23, 2020 -
UnscoredUSN-4431-1 9 CVEs
ffmpeg vulnerabilities
It was discovered that FFmpeg incorrectly verified empty audio packets or HEVC data. An attacker could possibly use this issue to cause a denial of service via a crafted file. This issue only affected Ubuntu 16.04 LTS, as it was already fixed in Ubuntu 18.04 …
first Jul 22, 2020 -
High max 8.1
thunderbird vulnerabilities
It was discovered that Message ID calculation was based on uninitialized data. An attacker could potentially exploit this to obtain sensitive information. (CVE-2020-6792) Mutiple security issues were discovered in Thunderbird. If a user were tricked in to ope…
first Apr 13, 2020 -
Low max 3.1USN-4316-1 2 CVEs
libgd2 vulnerabilities
It was discovered that GD Graphics Library incorrectly handled cloning an image. An attacker could possibly use this issue to cause GD Graphics Library to crash, resulting in a denial of service. (CVE-2018-14553) It was discovered that GD Graphics Library inc…
first Apr 2, 2020 -
UnscoredUSN-4207-1 13 CVEs
graphicsmagick vulnerabilities
It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.
first Dec 3, 2019 -
Medium max 6.5USN-4202-1 9 CVEs
thunderbird vulnerabilities
It was discovered that a specially crafted S/MIME message with an inner encryption layer could be displayed as having a valid signature in some circumstances, even if the signer had no access to the encrypted message. An attacker could potentially exploit thi…
first Nov 26, 2019 -
UnscoredUSN-4199-1 6 CVEs
libvpx vulnerabilities
It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.
first Nov 25, 2019 -
High max 7.5USN-4448-1 3 CVEs
tomcat8 vulnerabilities
It was discovered that Tomcat incorrectly validated the payload length in a WebSocket frame. A remote attacker could possibly use this issue to cause Tomcat to hang, resulting in a denial of service. (CVE-2020-13935) It was discovered that Tomcat incorrectly …
first Aug 4, 2020 -
Medium max 5.5USN-4382-1 14 CVEs
freerdp vulnerabilities
It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jun 4, 2020 -
UnscoredUSN-4376-1 4 CVEs
openssl vulnerabilities
Cesar Pereida García, Sohaib ul Hassan, Nicola Tuveri, Iaroslav Gridin, Alejandro Cabrera Aldaya, and Billy Brumley discovered that OpenSSL incorrectly handled ECDSA signatures. An attacker could possibly use this issue to perform a timing side-channel attack…
first May 28, 2020 -
High max 8.8
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass sec…
first Apr 21, 2020 -
UnscoredUSN-4309-1 6 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled certain sources. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04 LTS (CVE-2017-11109) It was discovered that Vi…
first Mar 23, 2020 -
High max 7.7USN-4283-1 3 CVEs
qemu vulnerabilities
Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that QEMU incorrectly handled iSCSI server responses. A remote attacker in control of the iSCSI server could use this issue to cause QEMU to crash, leading to a denial of service, or possibly e…
first Feb 18, 2020 -
High max 8.8USN-4238-1 12 CVEs
sdl-image1.2 vulnerabilities
It was discovered that SDL_image incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.
first Jan 14, 2020 -
Critical max 9.8USN-5248-1 44 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, trick a use…
first Jan 21, 2022 -
UnscoredUSN-4472-1 2 CVEs
postgresql-10, postgresql-12, postgresql-9.5 vulnerabilities
Noah Misch discovered that PostgreSQL incorrectly handled the search_path setting when used with logical replication. A remote attacker could possibly use this issue to execute arbitrary SQL code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS…
first Aug 25, 2020 -
Medium max 5.5USN-4379-1 19 CVEs
freerdp2 vulnerabilities
It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly exeucte arbitrary code.
first Jun 1, 2020 -
High max 7.5USN-4372-1 5 CVEs
qemu vulnerabilities
It was discovered that QEMU incorrectly handled bochs-display devices. A local attacker in a guest could use this to cause a denial of service or possibly execute arbitrary code in the host. This issue only affected Ubuntu 19.10. (CVE-2019-15034) It was disco…
first May 21, 2020 -
UnscoredUSN-4299-1 12 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the URL or other browser chrome, obtain sensitive informatio…
first Mar 11, 2020 -
UnscoredUSN-4298-2 6 CVEs
sqlite3 vulnerabilities
USN-4298-1 fixed several vulnerabilities in SQLite. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that SQLite incorrectly handled certain shadow tables. An attacker could use this issue to cau…
first Aug 3, 2020 -
Medium max 6.5USN-4244-1 3 CVEs
samba vulnerabilities
It was discovered that Samba did not automatically replicate ACLs set to inherit down a subtree on AD Directory, contrary to expectations. This issue was only addressed in Ubuntu 18.04 LTS, Ubuntu 19.04 and Ubuntu 19.10. (CVE-2019-14902) Robert Święcki discov…
first Jan 21, 2020 -
High max 8.1USN-4599-1 7 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the prompt for opening an external application, obtain sensi…
first Oct 23, 2020 -
UnscoredUSN-4497-1 7 CVEs
OpenJPEG vulnerabilities
It was discovered that OpenJPEG incorrectly handled certain image files. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2016-9112) It was discovered that OpenJPEG did not properly handle certain input. If OpenJPEG were supp…
first Sep 15, 2020 -
UnscoredUSN-4394-1 9 CVEs
sqlite3 vulnerabilities
It was discovered that SQLite incorrectly handled certain corruped schemas. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-8740) It was discovered that SQLite incorrectly handled ce…
first Jun 10, 2020 -
Critical max 9.8USN-4308-1 7 CVEs
twisted vulnerabilities
it was discovered that Twisted incorrectly validated or sanitized certain URIs or HTTP methods. A remote attacker could use this issue to inject invalid characters and possibly perform header injection attacks. (CVE-2019-12387) It was discovered that Twisted …
first Mar 19, 2020 -
UnscoredUSN-4191-1 5 CVEs
qemu vulnerabilities
It was discovered that the LSI SCSI adapter emulator implementation in QEMU did not properly validate executed scripts. A local attacker could use this to cause a denial of service. (CVE-2019-12068) Sergej Schumilo, Cornelius Aschermann and Simon Wörner disco…
first Nov 14, 2019 -
High max 7.2USN-4614-1 1 CVE
gdm3 vulnerability
Kevin Backhouse discovered that GDM incorrectly launched the initial setup tool when the accountsservice daemon was not reachable. A local attacker able to cause accountsservice to crash or stop responding could trick GDM into launching the initial setup tool…
first Nov 3, 2020 -
UnscoredUSN-4587-1 19 CVEs
italc vulnerabilities
Nicolas Ruff discovered that iTALC had buffer overflows, divide-by-zero errors and didn't check malloc return values. A remote attacker could use these issues to cause a denial of service or possibly execute arbitrary code. (CVE-2014-6051, CVE-2014-6052, CVE-…
first Oct 20, 2020 -
Medium max 5.5USN-4336-1 44 CVEs
binutils vulnerabilities
It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or pos…
first Apr 22, 2020 -
UnscoredUSN-4267-1 5 CVEs
mbedtls vulnerabilities
It was discovered that mbedtls has a bounds-check bypass through an integer overflow that can be used by an attacked to execute arbitrary code or cause a denial of service. (CVE-2017-18187) It was discovered that mbedtls has a vulnerability where an attacker …
first Feb 5, 2020 -
UnscoredUSN-4201-1 4 CVEs
ruby2.3, ruby2.5 vulnerabilities
It was discovered that Ruby incorrectly handled certain files. An attacker could possibly use this issue to pass path matching what can lead to an unauthorized access. (CVE-2019-15845) It was discovered that Ruby incorrectly handled certain regular expression…
first Nov 26, 2019 -
Critical max 9.8USN-4699-1 1 CVE
log4net vulnerability
It was discovered that Apache Log4net incorrectly handled certain configuration files. An attacker could possibly use this issue to expose sensitive information.
first Jan 19, 2021 -
High max 8.8USN-4697-1 3 CVEs
pillow vulnerabilities
It was discovered that Pillow incorrectly handled certain PCX image files. If a user or automated system were tricked into opening a specially-crafted PCX file, a remote attacker could possibly cause Pillow to crash, resulting in a denial of service. (CVE-202…
first Jan 18, 2021