8,464 results · Feed
-
UnscoredUSN-3906-1 6 CVEs
tiff vulnerabilities
It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute …
first Mar 12, 2019 -
UnscoredUSN-3897-1 7 CVEs
thunderbird vulnerabilities
A use-after-free was discovered in libical. If a user were tricked in to opening a specially crafted ICS calendar file, an attacker could potentially exploit this to cause a denial of service. (CVE-2016-5824) Multiple security issues were discovered in Thunde…
first Feb 26, 2019 -
Medium max 5.3USN-3759-1 3 CVEs
libtirpc vulnerabilities
Aldy Hernandez discovered that libtirpc incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-4429) It was discovered that libtirpc…
first Sep 5, 2018 -
High max 7.5USN-3727-1 9 CVEs
bouncycastle vulnerabilities
It was discovered that Bouncy Castle incorrectly handled certain crypto algorithms. A remote attacker could possibly use these issues to obtain sensitive information, including private keys.
first Aug 1, 2018 -
UnscoredUSN-3725-1 15 CVEs
mysql-5.5, mysql-5.7 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.61 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS and Ubuntu 18.04 LTS have been updated to MySQL 5.7.23. In addit…
first Jul 30, 2018 -
High max 8.8USN-4143-1 5 CVEs
SDL 2.0 vulnerabilities
It was discovered that SDL 2.0 mishandled crafted image files resulting in an integer overflow. If a user were tricked into opening a malicious file, SDL 2.0 could be caused to crash or potentially run arbitrary code. (CVE-2017-2888) It was discovered that SD…
first Sep 30, 2019 -
UnscoredUSN-4019-1 12 CVEs
sqlite3 vulnerabilities
It was discovered that SQLite incorrectly handled certain SQL files. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-2518, CVE-2017-2520) It was discovered …
first Jun 19, 2019 -
UnscoredUSN-3957-1 8 CVEs
mysql-5.7 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.04 have been updated to MySQL 5.7.26. In addition to security fixes, t…
first Apr 29, 2019 -
High max 7.5USN-3723-1 2 CVEs
tomcat7, tomcat8 vulnerabilities
It was discovered that Tomcat incorrectly handled decoding certain UTF-8 strings. A remote attacker could possibly use this issue to cause Tomcat to crash, resulting in a denial of service. (CVE-2018-1336) It was discovered that the Tomcat WebSocket client in…
first Jul 25, 2018 -
UnscoredUSN-3706-1 7 CVEs
libjpeg-turbo vulnerabilities
It was discovered that libjpeg-turbo incorrectly handled certain malformed JPEG images. If a user or automated system were tricked into opening a specially crafted JPEG image, a remote attacker could cause libjpeg-turbo to crash, resulting in a denial of serv…
first Jul 9, 2018 -
High max 8.8USN-4246-1 4 CVEs
zlib vulnerabilities
It was discovered that zlib incorrectly handled pointer arithmetic. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-9840, CVE-2016-9841) It was discovered that zlib incor…
first Jan 22, 2020 -
UnscoredUSN-4195-2 2 CVEs
mariadb vulnerabilities
USN-4195-1 fixed multiple vulnerabilities in MySQL. This update provides the corresponding fixes for CVE-2019-2974 in MariaDB 10.1 and CVE-2019-2938, CVE-2019-2974 for MariaDB 10.3. Ubuntu 18.04 LTS has been updated to MariaDB 10.1.43. Ubuntu 19.04 and 19.10 …
first Nov 20, 2019 -
UnscoredUSN-4168-1 2 CVEs
libidn2 vulnerabilities
It was discovered that Libidn2 incorrectly handled certain inputs. A attacker could possibly use this issue to impersonate domains. (CVE-2019-12290) It was discovered that Libidn2 incorrectly handled certain inputs. An attacker could possibly use this issue t…
first Oct 29, 2019 -
Medium max 6.3USN-4170-1 1 CVE
whoopsie vulnerability
Kevin Backhouse discovered Whoopsie incorrectly handled very large crash reports. A local attacker could possibly use this issue to cause a denial of service, expose sensitive information or execute code as the whoopsie user.
first Oct 30, 2019 -
Medium max 6.5USN-4132-1 1 CVE
expat vulnerability
It was discovered that Expat incorrectly handled certain XML files. An attacker could possibly use this issue to expose sensitive information.
first Sep 12, 2019 -
UnscoredUSN-4067-1 1 CVE
evince vulnerability
It was discovered that Evince incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code.
first Jul 22, 2019 -
UnscoredUSN-4070-2 4 CVEs
MariaDB vulnerabilities
USN-4070-1 fixed multiple vulnerabilities in MySQL. This update provides the corresponding fixes for CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2805 in MariaDB 10.1. Ubuntu 18.04 LTS has been updated to MariaDB 10.1.41. In addition to security fixe…
first Aug 12, 2019 -
UnscoredUSN-4131-1 11 CVEs
vlc vulnerabilities
It was discovered that VLC incorrectly handled certain media files. If a user were tricked into opening a specially-crafted file, a remote attacker could use this issue to cause VLC to crash, resulting in a denial of service, or possibly execute arbitrary cod…
first Sep 11, 2019 -
Medium max 6.5USN-4132-2 1 CVE
expat vulnerability
USN-4132-1 fixed a vulnerability in Expat. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Expat incorrectly handled certain XML files. An attacker could possibly use t…
first Sep 12, 2019 -
UnscoredUSN-5244-2 1 CVE
dbus vulnerability
USN-5244-1 fixed a vulnerability in DBus. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Daniel Onaca discovered that DBus contained a use-after-free vulnerability, caused by the incorrect h…
first May 9, 2022 -
Medium max 6.1USN-4043-1 2 CVEs
python-django vulnerabilities
It was discovered that Django incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 18.10 and Ubuntu 19.04. (CVE-2019-12308) Gavin Wahl discovered that Django…
first Jul 1, 2019 -
Critical max 9.8USN-4084-1 4 CVEs
python-django vulnerabilities
It was discovered that Django incorrectly handled the Truncator function. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service. (CVE-2019-14232) It was discovered that Django incorrectly handled …
first Aug 1, 2019 -
UnscoredUSN-4088-1 1 CVE
php5 vulnerability
It was discovered that PHP incorrectly handled certain regular expressions. An attacker could possibly use this issue to expose sensitive information, cause a denial of service or execute arbitrary code.
first Aug 7, 2019 -
High max 7.5USN-4040-2 1 CVE
expat vulnerability
USN-4040-1 fixed a vulnerability in expat. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Expat incorrectly handled certain XML files. An attacker could possibly use t…
first Jun 26, 2019 -
High max 7.5USN-4040-1 1 CVE
expat vulnerability
It was discovered that Expat incorrectly handled certain XML files. An attacker could possibly use this issue to cause a denial of service.
first Jun 26, 2019 -
UnscoredUSN-4077-1 1 CVE
tmpreaper vulnerability
It was discovered that tmpreaper incorrectly handled certain mount operations. A local attacker could possibly use this issue to create arbitrary files, leading to privilege escalation.
first Jul 29, 2019 -
UnscoredUSN-4074-1 4 CVEs
vlc vulnerabilities
It was discovered that the VLC CAF demuxer incorrectly handled certain files. If a user were tricked into opening a specially-crafted CAF file, a remote attacker could use this issue to cause VLC to crash, resulting in a denial of service. This issue only aff…
first Jul 25, 2019 -
UnscoredUSN-4023-1 2 CVEs
mosquitto vulnerabilities
It was discovered that Mosquitto broker incorrectly handled certain specially crafted input and network packets. A remote attacker could use this to cause a denial of service.
first Jun 20, 2019 -
UnscoredUSN-4002-1 1 CVE
doxygen vulnerability
It was discovered that Doxygen incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code and compromise sensitive information.
first Jun 3, 2019 -
UnscoredUSN-4004-1 1 CVE
db5.3 vulnerability
It was discovered that Berkeley DB incorrectly handled certain inputs. An attacker could possibly use this issue to read sensitive information.
first Jun 4, 2019 -
UnscoredUSN-3998-1 1 CVE
evolution-data-server vulnerability
Marcus Brinkmann discovered that Evolution Data Server did not correctly interpret the output from GPG when decrypting encrypted messages. Under certain circumstances, this could result in displaying clear-text portions of encrypted messages as though they we…
first May 30, 2019 -
UnscoredUSN-4039-1 3 CVEs
CImg vulnerabilities
It was discovered that allocation failures could occur in CImg when loading crafted bmp images. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-7587) It was discovered that a heap-based buffer over-read existed in CImg when l…
first Jun 26, 2019 -
UnscoredUSN-4004-2 1 CVE
db5.3 vulnerability
USN-4004-1 fixed a vulnerability in Berkeley DB. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that Berkeley DB incorrectly handled certain inputs. An attacker could possibly use this issue to…
first Jun 4, 2019 -
UnscoredUSN-3989-1 7 CVEs
libraw vulnerabilities
It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of servi…
first May 21, 2019 -
High max 7.5USN-3964-1 2 CVEs
python-gnupg vulnerabilities
Marcus Brinkmann discovered that GnuPG before 2.2.8 improperly handled certain command line parameters. A remote attacker could use this to spoof the output of GnuPG and cause unsigned e-mail to appear signed. (CVE-2018-12020) It was discovered that python-gn…
first May 2, 2019 -
Medium max 6.8USN-4716-1 25 CVEs
mysql-5.7, mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.23 in Ubuntu 20.04 LTS and Ubuntu 20.10. Ubuntu 16.04 LTS and Ubuntu 18.04 LTS have been updated to MySQL…
first Feb 1, 2021 -
UnscoredUSN-3957-3 2 CVEs
mariadb-10.1 vulnerabilities
USN-3957-1 fixed multiple vulnerabilities in MySQL. This update provides the corresponding fixes for CVE-2019-2614 and CVE-2019-2627 in MariaDB 10.1. Ubuntu 18.04 LTS has been updated to MariaDB 10.1.40. In addition to security fixes, the updated package cont…
first Jun 5, 2019 -
High max 8.8USN-3945-1 6 CVEs
ruby1.9.1, ruby2.0, ruby2.3, ruby2.5 vulnerabilities
It was discovered that Ruby incorrectly handled certain RubyGems. An attacker could possibly use this issue to execute arbitrary commands. (CVE-2019-8320) It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this issu…
first Apr 11, 2019 -
UnscoredUSN-3959-1 1 CVE
evince vulnerability
It was discovered that Evince incorrectly handled certain images. An attacker could possibly use this issue to expose sensitive information.
first Apr 29, 2019 -
Medium max 6.3USN-3892-1 1 CVE
gdm3 vulnerability
Burghard Britzke discovered that GDM incorrectly handled certain configurations. An attacker could possibly use this issue to get unauthorized access to a different user.
first Feb 20, 2019