8,464 results · Feed
-
High max 7.8USN-7601-1 4 CVEs
libarchive vulnerabilities
It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2025-5914) It was discovered that libarchive incorrectly handled certain RA…
first Jun 26, 2025 -
Medium max 5.9USN-7617-1 1 CVE
libtpms vulnerability
It was discovered that libtpms did not properly manage memory when performing crafted cryptographic operations. An attacker could possibly use this issue to cause a denial of service.
first Jul 3, 2025 -
High max 8.4USN-7631-1 1 CVE
djvulibre vulnerability
It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, a remote attacker could cause applications to stop responding or crash, resulting in a de…
first Jul 9, 2025 -
Critical max 9.4USN-7583-1 5 CVEs
python3.13, python3.12 vulnerabilities
It was discovered that Python incorrectly handled tar archive extraction with the filtering option. An attacker could possibly use this issue to modify files in arbitrary filesystem locations and cause data loss.
first Jun 19, 2025 -
High max 7.0USN-7577-1 1 CVE
libblockdev vulnerability
It was discovered that libblockdev incorrectly handled mount options when resizing certain filesystems. A local attacker with an active session on the console can use this issue to escalate their privileges to root.
first Jun 18, 2025 -
High max 8.8USN-7566-1 6 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Jun 11, 2025 -
Medium max 4.7USN-7559-1 1 CVE
systemd vulnerability
Qualys discovered that systemd incorrectly handled metadata when processing application crashes. An attacker could possibly use this issue to expose sensitive information.
first Jun 9, 2025 -
High max 7.0USN-7577-2 1 CVE
libblockdev vulnerability
USN-7577-1 fixed a vulnerability in libblockdev. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that libblockdev incorrectly handled mount options when resizing certain fil…
first Jun 18, 2025 -
High max 7.0USN-7578-1 1 CVE
udisks2 vulnerability
It was discovered that UDisks incorrectly handled mount options when resizing certain filesystems. A local attacker with an active session on the console can use this issue to escalate their privileges to root.
first Jun 18, 2025 -
High max 7.8USN-7541-1 1 CVE
glibc vulnerability
It was discovered that the GNU C Library incorrectly search LD_LIBRARY_PATH to determine which library to load when statically linked setuid binary calls dlopen. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary …
first May 28, 2025 -
High max 7.0USN-7578-2 1 CVE
udisks2 vulnerability
USN-7578-1 fixed a vulnerability in UDisks. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that UDisks incorrectly handled mount options when resizing certain filesystems. …
first Jun 18, 2025 -
Low max 2.4USN-7504-1 1 CVE
libreoffice vulnerability
Juraj Šarinay discovered that LibreOffice incorrectly handled verifying PDF signatures. A remote attacker could possibly use this issue to generate PDF files that appear to have a valid signature.
first May 8, 2025 -
Medium max 6.1USN-7508-1 1 CVE
open-vm-tools vulnerability
It was discovered that Open VM Tools incorrectly handled certain file operations. An attacker in a guest could use this issue to perform insecure file operations and possibly elevate privileges in the guest.
first May 13, 2025 -
Medium max 5.6USN-7467-1 2 CVEs
libxml2 vulnerabilities
It was discovered that the libxml2 Python bindings incorrectly handled certain return values. An attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service. (CVE-2025-32414) It was discovered that libxml2 incorrectly ha…
first Apr 28, 2025 -
High max 8.7USN-7435-1 1 CVE
protobuf vulnerability
It was discovered that Protocol Buffers incorrectly handled memory when receiving malicious input using the Java bindings. An attacker could possibly use this issue to cause a denial of service.
first Apr 14, 2025 -
High max 8.7USN-7414-1 1 CVE
xz-utils vulnerability
Harri K. Koskinen discovered that XZ Utils incorrectly handled the threaded xz decoder. If a user or automated system were tricked into processing an xz file, a remote attacker could use this issue to cause XZ Utils to crash, resulting in a denial of service,…
first Apr 3, 2025 -
Medium max 4.3USN-7471-1 1 CVE
poppler vulnerabilities
It was discovered that poppler did not properly verify adbe.pkcs7.sha1 signatures in PDF documents. An attacker could possibly use this issue to create documents with forged signatures that are treated as legitimately signed.
first Apr 29, 2025 -
Medium max 4.5USN-7473-1 1 CVE
ghostscript vulnerability
It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly bypass file path validation.
first May 1, 2025 -
Critical max 10.0
erlang vulnerability
Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk discovered that Erlang OTP’s SSH module incorrect handled authentication. A remote attacker could use this issue to execute arbitrary commands without authentication, possibly leading to a syst…
first Apr 17, 2025 -
Critical max 9.8USN-7436-1 7 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Apr 14, 2025 -
Medium max 4.0USN-7454-1 2 CVEs
libarchive vulnerabilities
It was discovered that the libarchive bsdunzip utility incorrectly handled certain ZIP archive files. If a user or automated system were tricked into processing a specially crafted ZIP archive, an attacker could use this issue to cause libarchive to crash, re…
first Apr 23, 2025 -
Critical max 10.0
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Mar 31, 2025 -
Critical max 9.8USN-7378-1 7 CVEs
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly serialized DollarBlend in certain fonts. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-27830) It was discovered th…
first Mar 27, 2025 -
Medium max 4.0USN-7426-1 2 CVEs
poppler vulnerabilities
It was discovered that poppler incorrectly handled memory when opening certain PDF files. An attacker could possibly use this issue to cause poppler to crash, resulting in a denial of service.
first Apr 8, 2025 -
Critical max 10.0USN-7397-1 1 CVE
aom vulnerability
Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.
first Mar 31, 2025 -
High max 8.4USN-7434-1 1 CVE
perl vulnerability
It was discovered that Perl incorrectly handled transliterating non-ASCII bytes. A remote attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Apr 14, 2025 -
High max 8.1USN-7373-1 1 CVE
exim4 vulnerability
It was discovered that Exim incorrectly handled certain memory operations. A remote attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 26, 2025 -
High max 7.8USN-7357-1 1 CVE
libxslt vulnerability
Ivan Fratric discovered that Libxslt incorrectly handled certain memory operations when handling documents. A remote attacker could use this issue to cause Libxslt to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 19, 2025 -
Medium max 5.6USN-7423-1 5 CVEs
binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash, expose sensitive information or execute arbitrary code. (CVE-2025-1153, CVE-2025-1182) It was discovered that ld in GNU binutil…
first Apr 7, 2025 -
Medium max 5.3USN-7369-1 5 CVEs
elfutils vulnerabilities
It was discovered that readelf from elfutils could be made to read out of bounds. If a user or automated system were tricked into running readelf on a specially crafted file, an attacker could cause readelf to crash, resulting in a denial of service. This iss…
first Mar 24, 2025 -
High max 8.1
freetype vulnerability
It was discovered that FreeType incorrectly handled certain memory operations when parsing font subglyph structures. A remote attacker could use this issue to cause FreeType to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 17, 2025 -
High max 7.2USN-7337-1 1 CVE
libreoffice vulnerability
It was discovered that LibreOffice incorrectly handled Office URI Schemes. If a user or automated system were tricked into opening a specially crafted LibreOffice file, a remote attacker could possibly use this issue to call internal macros.
first Mar 10, 2025 -
Critical max 9.3USN-7316-1 3 CVEs
raptor2 vulnerabilities
It was discovered that Raptor incorrectly handled memory operations when processing certain input files. A remote attacker could possibly use this issue to cause Raptor to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS and …
first Mar 3, 2025 -
High max 7.8USN-7361-1 1 CVE
libxslt vulnerability
Ivan Fratric discovered that Libxslt incorrectly handled certain memory operations when handling documents. A remote attacker could use this issue to cause Libxslt to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 20, 2025 -
Medium max 6.5USN-7317-1 3 CVEs
wpa vulnerabilities
George Chatzisofroniou and Panayiotis Kotzanikolaou discovered that wpa_supplicant and hostapd reused encryption elements in the PKEX protocol. An attacker could possibly use this issue to impersonate a wireless access point, and obtain sensitive information.…
first Mar 3, 2025 -
Medium max 5.5USN-7306-1 2 CVEs
binutils vulnerabilities
It was discovered that GNU binutils in nm tool is affected by an incorrect access control. An attacker could possibly use this issue to cause a crash. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2024-57360) It was disco…
first Feb 26, 2025 -
High max 8.8USN-7279-1 4 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Feb 20, 2025 -
Medium max 5.3USN-7273-1 2 CVEs
libsndfile vulnerabilities
It was discovered that libsndfile incorrectly handled memory when executing its FLAC codec. If a user or automated system were tricked into processing a specially crafted sound file, an attacker could possibly use this issue to cause a denial of service or ob…
first Feb 18, 2025 -
UnscoredUSN-7256-2 0 CVEs
ruby2.7 regression
USN-7256-1 fixed vulnerabilities in Ruby. The update introduced a minor regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Ruby incorrectly handled parsing of an XML document that h…
first Feb 13, 2025 -
High max 8.1USN-7240-1 2 CVEs
libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain memory operations. A remote attacker could use this issue to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-49043) It was discovered that the l…
first Jan 29, 2025