Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

All Critical High Medium Low With exploited CVEs

8,464 results · Feed

  • Unscored
    USN-6406-1 1 CVE

    mozjs102 vulnerabilities

    Several security issues were discovered in the SpiderMonkey JavaScript library. If a user were tricked into opening malicious JavaScript applications or processing malformed data, a remote attacker could exploit a variety of issues related to JavaScript secur…

    first Oct 3, 2023
  • Critical max 9.8
    USN-6405-1 11 CVEs 1 exploited

    thunderbird vulnerabilities

    Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass secu…

    first Oct 3, 2023
  • Unscored
    USN-6404-2 0 CVEs

    firefox regressions

    USN-6404-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tri…

    first Oct 11, 2023
  • Medium max 6.5
    USN-6401-1 10 CVEs

    freerdp2 vulnerabilities

    It was discovered that FreeRDP did not properly manage certain inputs. A malicious server could use this issue to cause FreeRDP clients to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2023-39350, CVE-2023-39351, CVE-…

    first Oct 4, 2023
  • High max 8.8
    USN-6369-2 1 CVE 1 exploited

    libwebp vulnerability

    USN-6369-1 fixed a vulnerability in libwebp. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked…

    first Sep 28, 2023
  • Critical max 9.8
    USN-6404-1 8 CVEs 1 exploited

    firefox vulnerabilities

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…

    first Oct 3, 2023
  • High max 8.8
    USN-6369-1 1 CVE 1 exploited

    libwebp vulnerability

    It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image file, a remote attacker could use this issue to cause libwebp to crash, resulting in a denial of ser…

    first Sep 14, 2023
  • High max 7.5
    USN-6390-1 2 CVEs

    bind9 vulnerabilities

    It was discovered that Bind incorrectly handled certain control channel messages. A remote attacker with access to the control channel could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2023-3341) Robert Story discove…

    first Sep 20, 2023
  • High max 7.1
    USN-6365-1 1 CVE

    open-vm-tools vulnerability

    It was discovered that Open VM Tools incorrectly handled SAML tokens. A remote attacker could possibly use this issue to bypass SAML token signature verification and perform VMware Tools Guest Operations.

    first Sep 13, 2023
  • Unscored
    USN-6360-1 1 CVE

    flac vulnerability

    It was discovered that FLAC incorrectly handled encoding certain files. A remote attacker could use this issue to cause FLAC to crash, resulting in a denial of service, or possibly execute arbitrary code.

    first Sep 12, 2023
  • High max 8.8
    USN-6368-1 6 CVEs 1 exploited

    thunderbird vulnerabilities

    Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass secu…

    first Sep 14, 2023
  • High max 8.8
    USN-6367-1 1 CVE 1 exploited

    firefox vulnerability

    It was discovered that Firefox did not properly manage memory when handling WebP images. If a user were tricked into opening a webpage containing malicious WebP image file, an attacker could potentially exploit these to cause a denial of service or execute ar…

    first Sep 14, 2023
  • Unscored
    USN-6361-1 1 CVE

    cups vulnerability

    It was discovered that CUPS incorrectly authenticated certain remote requests. A remote attacker could possibly use this issue to obtain recently printed documents.

    first Sep 12, 2023
  • High max 8.8
    USN-6320-1 11 CVEs

    firefox vulnerabilities

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…

    first Aug 30, 2023
  • Unscored
    USN-6308-1 1 CVE

    libqb vulnerability

    It was discovered that Libqb incorrectly handled certain messages. An attacker could possibly use this issue to cause a crash or execute arbitrary code.

    first Aug 28, 2023
  • High max 8.8
    USN-6289-1 9 CVEs

    webkit2gtk vulnerabilities

    Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…

    first Aug 15, 2023
  • High max 7.5
    USN-6303-1 1 CVE

    clamav vulnerability

    It was discovered that ClamAV incorrectly handled parsing HFS+ files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service.

    first Aug 21, 2023
  • Unscored
    USN-6359-1 1 CVE

    file vulnerability

    It was discovered that file incorrectly handled certain malformed files. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code.

    first Sep 12, 2023
  • Unscored
    USN-6333-1 9 CVEs

    thunderbird vulnerabilities

    Junsung Lee discovered that Thunderbird did not properly validate the text direction override unicode character in filenames. An attacker could potentially exploits this issue by spoofing file extension while attaching a file in emails. (CVE-2023-3417) Max Vl…

    first Sep 4, 2023
  • Unscored
    USN-6310-1 1 CVE

    json-c vulnerability

    It was discovered that json-c incorrectly handled certain JSON files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.

    first Aug 28, 2023
  • Unscored
    USN-6267-3 0 CVEs

    firefox regressions

    USN-6267-1 fixed vulnerabilities and USN-6267-2 fixed minor regressions in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were di…

    first Aug 21, 2023
  • Medium max 5.5
    USN-6258-1 4 CVEs

    llvm-toolchain-13, llvm-toolchain-14, llvm-toolchain-15 vulnerabilities

    It was discovered that LLVM Toolchain did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted MLIR file, an attacker could possibly use this issue to cause LLVM Toolchain to crash, resulting in a den…

    first Jul 27, 2023
  • Unscored
    USN-6237-2 0 CVEs

    curl regression

    USN-6237-1 fixed vulnerabilities in curl. The update caused a certificate wildcard handling regression on Ubuntu 22.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Hiroki Kurosawa discovered that curl inco…

    first Jul 19, 2023
  • Medium max 5.5
    USN-6273-1 2 CVEs

    poppler vulnerabilities

    Jieyong Ma discovered that poppler incorrectly handled certain malformed PDF files. A remote attacker could possibly use this issue to cause poppler to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (C…

    first Aug 3, 2023
  • Unscored
    USN-6218-1 1 CVE

    firefox vulnerability

    A use-after-free was discovered in Firefox when handling workers. An attacker could potentially exploit this to cause a denial of service, or execute arbitrary code.

    first Jul 12, 2023
  • Unscored
    USN-6266-1 1 CVE

    librsvg vulnerability

    Zac Sims discovered that librsvg incorrectly handled decoding URLs. A remote attacker could possibly use this issue to read arbitrary files by using an include element.

    first Aug 1, 2023
  • Unscored
    USN-6267-1 12 CVEs

    firefox vulnerabilities

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…

    first Aug 2, 2023
  • Unscored
    USN-6213-1 1 CVE

    ghostscript vulnerability

    It was discovered that Ghostscript incorrectly handled pipe devices. If a user or automated system were tricked into opening a specially crafted PDF file, a remote attacker could use this issue to execute arbitrary code.

    first Jul 10, 2023
  • High max 8.1
    USN-6190-1 1 CVE

    accountsservice vulnerability

    Kevin Backhouse discovered that AccountsService incorrectly handled certain D-Bus messages. A local attacker could use this issue to cause AccountsService to crash, resulting in a denial of service, or possibly execute arbitrary code.

    first Jun 28, 2023
  • High max 8.8
    USN-6264-1 6 CVEs 5 exploited

    webkit2gtk vulnerabilities

    Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…

    first Jul 31, 2023
  • Unscored
    USN-6267-2 0 CVEs

    firefox regressions

    USN-6267-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tri…

    first Aug 8, 2023
  • High max 7.8
    USN-6201-1 13 CVEs

    firefox vulnerabilities

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…

    first Jul 5, 2023
  • Unscored
    USN-6214-1 7 CVEs

    thunderbird vulnerabilities

    Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass secu…

    first Jul 11, 2023
  • High max 8.1
    USN-6216-1 1 CVE

    lib3mf vulnerability

    It was discovered that lib3mf did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted 3MF file, a local attacker could possibly use this issue to cause applications using lib3mf to crash, resulting i…

    first Jul 11, 2023
  • Unscored
    USN-6138-1 2 CVEs

    libssh vulnerabilities

    Philip Turnbull discovered that libssh incorrectly handled rekeying with algorithm guessing. A remote attacker could use this issue to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-1667) Kevin Backhouse…

    first Jun 5, 2023
  • High max 7.5
    USN-6164-1 2 CVEs

    c-ares vulnerabilities

    Hannes Moesl discovered that c-ares incorrectly handled certain ipv6 addresses. An attacker could use this issue to cause c-ares to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-31130) Xiang Li discovered that c-ares i…

    first Jun 14, 2023
  • Critical max 9.8
    USN-6143-1 4 CVEs

    firefox vulnerabilities

    Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary c…

    first Jun 7, 2023
  • Medium max 5.3
    USN-6184-1 1 CVE

    cups vulnerability

    It was discovered that CUPS incorrectly handled certain memory operations. An attacker could possibly use this issue to cause CUPS to crash, resulting in a denial of service, or possibly obtain sensitive information.

    first Jun 22, 2023
  • Low max 2.6
    USN-6199-1 1 CVE

    php7.4, php8.1 vulnerability

    It was discovered that PHP incorrectly handled certain Digest authentication for SOAP. An attacker could possibly use this issue to expose sensitive information.

    first Jul 3, 2023
  • Unscored
    USN-6143-3 0 CVEs

    firefox regressions

    USN-6143-1 fixed vulnerabilities and USN-6143-2 fixed minor regressions in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were di…

    first Jun 21, 2023