8,464 results · Feed
-
Medium max 6.2USN-5184-1 1 CVE
libmysofa vulnerability
It was discovered that libmysofa mishandled certain input. An attacker could use this vulnerability to cause a denial of service (crash).
first Dec 8, 2021 -
UnscoredUSN-5172-1 4 CVEs
uriparser vulnerabilities
It was discovered that uriparser mishandled certain input. An attacker could use this vulnerability to cause uriparser to crash or possibly execute arbitrary code. (CVE-2018-19198, CVE-2018-19199, CVE-2018-19200) It was discovered that uriparser incorrectly h…
first Dec 6, 2021 -
UnscoredUSN-5212-1 2 CVEs
apache2 vulnerabilities
It was discovered that the Apache HTTP Server incorrectly handled certain forward proxy requests. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly perform a Server Side Request Forgery attack. …
first Jan 6, 2022 -
UnscoredUSN-5173-1 2 CVEs
libmodbus vulnerabilities
It was discovered that libmodbus incorrectly handled inputs. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.
first Dec 6, 2021 -
UnscoredUSN-5186-2 0 CVEs
firefox regressions
USN-5186-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tri…
first Dec 20, 2021 -
UnscoredUSN-5168-1 1 CVE
nss vulnerability
Tavis Ormandy discovered that NSS incorrectly handled verifying DSA/RSA-PSS signatures. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Dec 1, 2021 -
High max 8.8
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site s…
first Jan 27, 2022 -
UnscoredUSN-5153-1 2 CVEs
libreoffice vulnerabilities
It was discovered that LibreOffice incorrectly handled digital signatures. An attacker could possibly use this issue to create a specially crafted document that would display a validly signed indicator, contrary to expectations.
first Nov 22, 2021 -
UnscoredUSN-5142-2 0 CVEs
samba regressions
USN-5142-1 fixed vulnerabilities in Samba. Some of the upstream changes introduced regressions in name mapping and backups. Please see the following upstream bugs for more information: https://bugzilla.samba.org/show_bug.cgi?id=14901 https://bugzilla.samba.or…
first Dec 6, 2021 -
UnscoredUSN-5146-1 1 CVE
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, or execute arbitrary code.
first Nov 11, 2021 -
High max 8.8USN-5191-1 1 CVE
flatpak vulnerability
It was discovered that Flatpak incorrectly handled certain AF_UNIX sockets. An attacker could use this to specially craft a Flatpak application that could escape sandbox confinement.
first Dec 14, 2021 -
UnscoredUSN-5143-1 1 CVE
leptonlib vulnerability
It was discovered that Leptonica incorrectly handled certain image files. An attacker could possibly use this issue to execute arbitrary code or other unspecified impact.
first Feb 8, 2022 -
UnscoredUSN-5131-1 6 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass security restrictions, spoof the browser UI, confuse the use…
first Nov 3, 2021 -
UnscoredUSN-5186-1 10 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, conduct spoofing attacks, bypass CSP …
first Dec 9, 2021 -
UnscoredUSN-5128-1 5 CVEs
ceph vulnerabilities
Goutham Pacha Ravi, Jahson Babel, and John Garbutt discovered that user credentials in Ceph could be manipulated in certain environments. An attacker could use this to gain unintended access to resources. This issue only affected Ubuntu 18.04 LTS. (CVE-2020-2…
first Nov 1, 2021 -
UnscoredUSN-5156-1 1 CVE
A security issue was fixed in ICU
It was discovered that ICU contains a double free issue. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code.
first Nov 24, 2021 -
UnscoredUSN-5124-1 2 CVEs
binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled certain hash lookups. An attacker could use this issue to cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-16592) It was discovered that GNU bi…
first Oct 25, 2021 -
Medium max 5.3USN-5126-1 1 CVE
bind9 vulnerability
Kishore Kumar Kothapalli discovered that Bind incorrectly handled the lame cache when processing responses. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service.
first Oct 28, 2021 -
UnscoredUSN-5108-1 1 CVE
libntlm vulnerability
It was discovered that Libntlm incorrectly handled specially crafted NTML requests. An attacker could possibly use this issue to cause a denial of service or another unspecified impact.
first Oct 8, 2021 -
UnscoredUSN-5142-3 0 CVEs
samba regression
USN-5142-1 fixed vulnerabilities in Samba. Some of the upstream changes introduced a regression in Kerberos authentication in certain environments. Please see the following upstream bug for more information: https://bugzilla.samba.org/show_bug.cgi?id=14922 Th…
first Dec 13, 2021 -
High max 8.8
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site s…
first Sep 22, 2021 -
UnscoredUSN-5090-3 0 CVEs
apache2 regression
USN-5090-1 fixed vulnerabilities in Apache HTTP Server. One of the upstream fixes introduced a regression in UDS URIs. This update fixes the problem. Original advisory details: James Kettle discovered that the Apache HTTP Server HTTP/2 module incorrectly hand…
first Sep 28, 2021 -
High max 7.8USN-5149-1 1 CVE
accountsservice vulnerability
Kevin Backhouse discovered that AccountsService incorrectly handled memory when performing certain language setting operations. A local attacker could use this issue to escalate privileges.
first Nov 16, 2021 -
Critical max 9.0
apache2 vulnerabilities
James Kettle discovered that the Apache HTTP Server HTTP/2 module incorrectly handled certain crafted methods. A remote attacker could possibly use this issue to perform request splitting or cache poisoning attacks. (CVE-2021-33193) It was discovered that the…
first Sep 27, 2021 -
UnscoredUSN-5099-1 1 CVE
imlib2 vulnerability
It was discovered that Imlib2 incorrectly handled certain ICO images. An attacker could use this issue to cause a denial of service and possibly execute arbitrary code.
first Oct 4, 2021 -
Critical max 9.8USN-5229-1 13 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, bypass security restrictions, obtain sensitiv…
first Jan 13, 2022 -
UnscoredUSN-5226-1 1 CVE
systemd vulnerability
It was discovered that systemd-tmpfiles employed uncontrolled recursion when removing deeply nested directory hierarchies. A local attacker could exploit this to cause systemd-tmpfiles to crash or have other unspecified impacts.
first Jan 13, 2022 -
UnscoredUSN-5079-3 0 CVEs
curl vulnerabilities
USN-5079-1 fixed vulnerabilities in curl. One of the fixes introduced a regression on Ubuntu 18.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that curl incorrect handled memory when sen…
first Sep 21, 2021 -
UnscoredUSN-5127-1 3 CVEs
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site s…
first Nov 1, 2021 -
UnscoredUSN-5054-1 1 CVE
uwsgi vulnerability
Felix Wilhelm discovered a buffer overflow flaw in the mod_proxy_uwsgi module. An attacker could use this vulnerability to provoke an information disclosure or potentially remote code execution.
first Aug 30, 2021 -
UnscoredUSN-5053-1 1 CVE
libssh vulnerability
It was discovered that libssh incorrectly handled rekeying. A remote attacker could use this issue to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Aug 26, 2021 -
UnscoredUSN-5075-1 1 CVE
ghostscript vulnerability
It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary …
first Sep 10, 2021 -
UnscoredUSN-5084-1 1 CVE
tiff vulnerability
It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute …
first Sep 21, 2021 -
UnscoredUSN-5060-1 0 CVEs
ntfs-3g vulnerabilities
It was discovered that NTFS-3G incorrectly handled certain image file. An attacker could possibly use this issue to execute arbitrary code.
first Aug 31, 2021 -
UnscoredUSN-5058-1 10 CVEs
thunderbird vulnerabilities
It was discovered that Thunderbird didn't ignore IMAP server responses prior to completion of the STARTTLS handshake. A person-in-the-middle could potentially exploit this to trick Thunderbird into showing incorrect information. (CVE-2021-29969) Multiple secu…
first Aug 31, 2021 -
UnscoredUSN-5047-1 1 CVE
firefox vulnerability
It was discovered that Firefox could be made to incorrectly accept newlines in HTTP/3 response headers. If a user were tricked into opening a specially crafted website, an attacker could exploit this to conduct header splitting attacks.
first Aug 19, 2021 -
UnscoredUSN-5037-1 10 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, trick a user into accepting unwanted …
first Aug 11, 2021 -
Critical max 9.8USN-5029-1 2 CVEs
gnutls28 vulnerabilities
It was discovered that GnuTLS incorrectly handled sending certain extensions when being used as a client. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Aug 2, 2021 -
UnscoredUSN-5074-1 3 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass mixed content blocking, or execute arbitrary code.
first Sep 9, 2021 -
UnscoredUSN-5037-2 0 CVEs
firefox regression
USN-5037-1 fixed vulnerabilities in Firefox. The update introduced a regression that caused Firefox to repeatedly prompt for a password. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues wer…
first Aug 25, 2021