8,464 results · Feed
-
High max 8.8
libvpx vulnerability
It was discovered that libvpx did not properly handle certain malformed media files. If an application using libvpx opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code. Ubuntu 22.04 LTS, Ubunt…
first Dec 18, 2024 -
High max 8.7USN-7219-1 1 CVE
python3.12 vulnerability
It was discovered that Python incorrectly handled asyncio write buffers. A remote attacker could possibly use this issue to cause Python to consume memory, leading to a denial of service.
first Jan 20, 2025 -
High max 8.1USN-7182-1 1 CVE
ceph vulnerability
It was discovered that Ceph incorrectly handled unsupported JWT algorithms in the RadosGW gateway. An attacker could possibly use this issue to bypass certain authentication checks and restrictions.
first Jan 6, 2025 -
UnscoredUSN-7198-1 7 CVEs
rlottie vulnerabilities
Paolo Giai discovered a series of stack-based overflow vulnerabilities in the blit and gray_render_cubic functions of a custom fork of the rlottie library. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubunt…
first Jan 10, 2025 -
High max 8.6USN-6840-1 7 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass secu…
first Jun 19, 2024 -
High max 7.4USN-7178-1 1 CVE
dpdk vulnerability
It was discovered that DPDK incorrectly handled the Vhost library checksum offload feature. An malicious guest could possibly use this issue to cause the hypervisor's vSwitch to crash, resulting in a denial of service.
first Dec 19, 2024 -
Critical max 9.8USN-6822-1 3 CVEs
nodejs vulnerabilities
It was discovered that Node.js incorrectly handled certain inputs when it is using the policy mechanism. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to bypass the p…
first Jun 10, 2024 -
Critical max 9.8USN-6779-1 14 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…
first May 21, 2024 -
High max 8.1USN-6830-1 1 CVE
libndp vulnerability
It was discovered that libndp incorrectly handled certain malformed IPv6 router advertisement packets. A local attacker could use this issue to cause NetworkManager to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jun 12, 2024 -
High max 7.8USN-6805-1 1 CVE
libarchive vulnerability
It was discovered that libarchive incorrectly handled certain RAR archive files. An attacker could possibly use this issue to execute arbitrary code or cause a crash.
first Jun 4, 2024 -
Medium max 5.9USN-6814-1 1 CVE
libvpx vulnerability
Xiantong Hou discovered that libvpx did not properly handle certain malformed media files. If an application using libvpx opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.
first Jun 6, 2024 -
High max 8.8USN-6782-1 6 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass secu…
first May 22, 2024 -
Critical max 10.0USN-6815-1 1 CVE
aom vulnerability
Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.
first Jun 6, 2024 -
Low max 3.1USN-6802-1 1 CVE
postgresql-14, postgresql-15, postgresql-16 vulnerability
Lukas Fittl discovered that PostgreSQL incorrectly performed authorization in the built-in pg_stats_ext and pg_stats_ext_exprs views. An unprivileged database user can use this issue to read most common values and other statistics from CREATE STATISTICS comma…
first May 30, 2024 -
Medium max 6.2USN-6763-1 1 CVE
libvirt vulnerability
Martin Širokov discovered that libvirt incorrectly handled certain memory operations. A local attacker could possibly use this issue to access virtproxyd without authorization.
first May 7, 2024 -
High max 8.8USN-6750-1 8 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass secu…
first Apr 25, 2024 -
Medium max 6.5USN-6789-1 1 CVE
libreoffice vulnerability
Amel Bouziane-Leblond discovered that LibreOffice incorrectly handled graphic on-click bindings. If a user were tricked into clicking a graphic in a specially crafted document, a remote attacker could possibly run arbitrary script.
first May 28, 2024 -
UnscoredUSN-6747-2 0 CVEs
firefox regressions
USN-6747-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafte…
first May 2, 2024 -
UnscoredUSN-6779-2 0 CVEs
firefox regressions
USN-6779-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafte…
first May 29, 2024 -
Medium max 5.3USN-6754-2 1 CVE
nghttp2 vulnerability
USN-6754-1 fixed vulnerabilities in nghttp2. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: It was discovered that nghttp2 incorrectly handled the HTTP/2 implementation. A remote attacker could possibly use this…
first May 7, 2024 -
High max 8.8USN-6747-1 14 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…
first Apr 24, 2024 -
UnscoredUSN-6727-2 0 CVEs
nss regression
USN-6727-1 fixed vulnerabilities in NSS. The update introduced a regression when trying to load security modules on Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was dis…
first Apr 11, 2024 -
Medium max 5.3USN-6733-2 2 CVEs
gnutls28 vulnerabilities
USN-6733-1 fixed vulnerabilities in GnuTLS. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that GnuTLS had a timing side-channel when performing certain ECDSA operations. A remote attacker cou…
first Apr 29, 2024 -
High max 7.8USN-6715-2 1 CVE
unixodbc vulnerability
USN-6715-1 fixed a vulnerability in unixODBC. This update provides the corresponding fix for Ubuntu 24.04 LTS. Original advisory details: It was discovered that unixODBC incorrectly handled certain bytes. An attacker could use this issue to execute arbitrary …
first Jun 5, 2024 -
Critical max 9.8USN-6710-1 2 CVEs
firefox vulnerabilities
Manfred Paul discovered that Firefox did not properly perform bounds checking during range analysis, leading to an out-of-bounds write vulnerability. A attacker could use this to cause a denial of service, or execute arbitrary code. (CVE-2024-29943) Manfred P…
first Mar 25, 2024 -
Medium max 5.3USN-6733-1 2 CVEs
gnutls28 vulnerabilities
It was discovered that GnuTLS had a timing side-channel when performing certain ECDSA operations. A remote attacker could possibly use this issue to recover sensitive information. (CVE-2024-28834) It was discovered that GnuTLS incorrectly handled verifying ce…
first Apr 15, 2024 -
High max 8.8USN-6732-1 8 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
first Apr 15, 2024 -
UnscoredUSN-6710-2 0 CVEs
firefox regressions
USN-6710-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Manfred Paul discovered that Firefox did not properly perform bounds checking during range analysis, leadin…
first Apr 4, 2024 -
High max 8.8USN-6669-1 18 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass secu…
first Mar 4, 2024 -
High max 7.3USN-6666-1 1 CVE
libuv1 vulnerability
It was discovered that libuv incorrectly truncated certain hostnames. A remote attacker could possibly use this issue with specially crafted hostnames to bypass certain checks.
first Feb 28, 2024 -
High max 8.1USN-6695-1 3 CVEs
texlive-bin vulnerabilities
It was discovered that TeX Live incorrectly handled certain memory operations in the embedded axodraw2 tool. An attacker could possibly use this issue to cause TeX Live to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CV…
first Mar 14, 2024 -
High max 8.8USN-6945-1 1 CVE
wpa vulnerability
Rory McNamara discovered that wpa_supplicant could be made to load arbitrary shared objects by unprivileged users that have access to the control interface. An attacker could use this to escalate privileges to root.
first Aug 6, 2024 -
UnscoredUSN-6663-3 0 CVEs
openssl update
USN-6663-1 provided a security update for OpenSSL. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: As a security improvement, OpenSSL will now return deterministic random bytes instead of an error when detecting …
first May 23, 2024 -
High max 7.5USN-6658-1 1 CVE
libxml2 vulnerability
It was discovered that libxml2 incorrectly handled certain XML documents. A remote attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Feb 26, 2024 -
UnscoredUSN-6663-1 0 CVEs
openssl update
As a security improvement, OpenSSL will now return deterministic random bytes instead of an error when detecting wrong padding in PKCS#1 v1.5 RSA to prevent its use in possible Bleichenbacher timing attacks.
first Feb 27, 2024 -
UnscoredUSN-6655-1 3 CVEs
binutils vulnerabilities
It was discovered that GNU binutils was not properly handling the logic behind certain memory management related operations, which could lead to an invalid memory access. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-47695)…
first Feb 26, 2024 -
UnscoredUSN-6649-2 0 CVEs
firefox regressions
USN-6649-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafte…
first Mar 6, 2024 -
High max 8.8USN-6610-1 14 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…
first Jan 29, 2024 -
High max 7.5USN-6616-1 1 CVE
openldap vulnerability
It was discovered that OpenLDAP was not properly performing bounds checks when executing functions related to LDAP URLs. An attacker could possibly use this issue to cause a denial of service.
first Jan 30, 2024 -
Critical max 9.8USN-6649-1 12 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…
first Feb 22, 2024