8,464 results · Feed
-
Medium max 5.5USN-4451-1 1 CVE
ppp vulnerability
Thomas Chauchefoin working with Trend Micro´s Zero Day Initiative, discovered that ppp incorrectly handled module loading. A local attacker could use this issue to load arbitrary kernel modules and possibly execute arbitrary code.
first Aug 4, 2020 -
UnscoredUSN-4447-1 1 CVE
libssh vulnerability
It was discovered that libssh incorrectly handled certain requests. An attacker could possibly use this issue to cause a denial of service.
first Aug 4, 2020 -
UnscoredUSN-4444-1 6 CVEs
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site s…
first Aug 3, 2020 -
UnscoredUSN-4474-1 8 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, trick the user in to installing a malicious extension, spoof the U…
first Aug 26, 2020 -
Critical max 9.3USN-4452-1 1 CVE
libvirt vulnerability
Trent Shea working with Trend Micro´s Zero Day Initiative, discovered that the libvirt package set incorrect permissions on the UNIX domain socket. A local attacker could use this issue to access libvirt and escalate privileges.
first Aug 4, 2020 -
UnscoredUSN-4423-1 0 CVEs
firefox vulnerability
It was discovered that X-Frame-Options could be bypassed in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to conduct clickjacking attacks.
first Jul 14, 2020 -
High max 8.8USN-4422-1 8 CVEs
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site s…
first Jul 14, 2020 -
UnscoredUSN-4466-2 1 CVE
curl vulnerability
USN-4466-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Marc Aldorasi discovered that curl incorrectly handled the libcurl CURLOPT_CONNECT_ONLY option. This could result in data …
first Aug 20, 2020 -
UnscoredUSN-4436-2 0 CVEs
librsvg regression
USN-4436-1 fixed a vulnerability in librsvg. The upstream fix caused a regression when parsing certain SVG files. This update backs out the fix pending further investigation. Original advisory details: It was discovered that librsvg incorrectly handled parsin…
first Jul 29, 2020 -
UnscoredUSN-4429-1 1 CVE
evolution-data-server vulnerability
It was discovered that Evolution Data Server incorrectly handled STARTTLS when using SMTP and POP3. A remote attacker could possibly use this issue to perform a response injection attack.
first Jul 22, 2020 -
UnscoredUSN-4443-1 9 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass iframe sandbox restrictions, …
first Jul 29, 2020 -
UnscoredUSN-4445-1 1 CVE
ghostscript vulnerability
It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary …
first Aug 3, 2020 -
UnscoredUSN-4436-1 2 CVEs
librsvg vulnerabilities
It was discovered that librsvg incorrectly handled parsing certain SVG files. A remote attacker could possibly use this issue to cause librsvg to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-11464) It was disco…
first Jul 27, 2020 -
UnscoredUSN-4460-1 4 CVEs
libonig vulnerabilities
It was discovered that Oniguruma incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information or other unspecified impact. (CVE-2019-16163, CVE-2019-19012, CVE-2019-19204…
first Aug 17, 2020 -
UnscoredUSN-4417-1 1 CVE
nss vulnerability
Cesar Pereida, Billy Bob Brumley, Yuval Yarom, and Nicola Tuveri discovered that NSS incorrectly handled RSA key generation. A local attacker could possibly use this issue to perform a timing attack and recover RSA keys.
first Jul 6, 2020 -
UnscoredUSN-4408-1 11 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass permission prompts, or execut…
first Jul 2, 2020 -
UnscoredUSN-4466-1 1 CVE
curl vulnerability
Marc Aldorasi discovered that curl incorrectly handled the libcurl CURLOPT_CONNECT_ONLY option. This could result in data being sent to the wrong destination, possibly exposing sensitive information.
first Aug 19, 2020 -
UnscoredUSN-4418-1 2 CVEs
openexr vulnerabilities
It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.
first Jul 6, 2020 -
UnscoredUSN-4469-1 25 CVEs
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled certain document files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could use this issue to cause Ghostscript to crash, resulting in a denial of …
first Aug 24, 2020 -
UnscoredUSN-4347-1 1 CVE
webkit2gtk vulnerability
A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site s…
first Apr 29, 2020 -
UnscoredUSN-4395-1 1 CVE
fwupd vulnerability
Justin Steven discovered that fwupd incorrectly handled certain signature verification. An attacker could possibly use this issue to install an unsigned firmware.
first Jun 15, 2020 -
UnscoredUSN-4441-2 0 CVEs
mysql-8.0 regression
USN-4441-1 fixed vulnerabilities in MySQL. The new upstream version changed compiler options and caused a regression in certain scenarios. This update fixes the problem. Original advisory details: Multiple security issues were discovered in MySQL and this upd…
first Aug 5, 2020 -
UnscoredUSN-4417-2 1 CVE
nss vulnerability
USN-4417-1 fixed a vulnerability in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Cesar Pereida, Billy Bob Brumley, Yuval Yarom, and Nicola Tuveri discovered that NSS incorrectly handl…
first Jul 6, 2020 -
High max 7.5USN-4341-2 1 CVE
samba vulnerability
USN-4341-1 fixed a vulnerability in Samba. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that Samba incorrectly handled certain LDAP queries. A remote attacker could possibly use this issue to…
first Apr 29, 2020 -
UnscoredUSN-4398-2 1 CVE
dbus vulnerability
USN-4398-1 fixed a vulnerability in DBus. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Kevin Backhouse discovered that DBus incorrectly handled file descriptors. A local attacker could pos…
first Jun 16, 2020 -
UnscoredUSN-4397-1 2 CVEs
nss vulnerabilities
It was discovered that NSS incorrectly handled the TLS State Machine. A remote attacker could possibly use this issue to cause NSS to hang, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 19.10. (CVE-2019-17023) Cesar Pe…
first Jun 16, 2020 -
UnscoredUSN-4421-1 10 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, or execute…
first Jul 8, 2020 -
UnscoredUSN-4404-1 3 CVEs
nvidia-graphics-drivers-390, nvidia-graphics-drivers-440 vulnerabilities
Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when performing IPC. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2020-5963) It was discovered that t…
first Jun 25, 2020 -
UnscoredUSN-4373-1 5 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, or execute arbitrary code. (CVE-2020-683…
first May 26, 2020 -
High max 7.5USN-4435-2 3 CVEs
clamav vulnerabilities
USN-4435-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled parsing ARJ archives. A remote attacker c…
first Jul 27, 2020 -
UnscoredUSN-4397-2 1 CVE
nss vulnerability
USN-4397-1 fixed a vulnerability in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Cesar Pereida Garcia discovered that NSS incorrectly handled DSA key generation. A local attacker coul…
first Jun 17, 2020 -
Medium max 5.5USN-4382-2 13 CVEs
freerdp vulnerabilities
It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Nov 26, 2020 -
UnscoredUSN-4398-1 1 CVE
dbus vulnerability
Kevin Backhouse discovered that DBus incorrectly handled file descriptors. A local attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service.
first Jun 16, 2020 -
Medium max 6.5USN-4371-1 2 CVEs
libvirt vulnerabilities
It was discovered that libvirt incorrectly handled an active pool without a target path. A remote attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. (CVE-2020-10703) It was discovered that libvirt incorrectly h…
first May 21, 2020 -
UnscoredUSN-4438-1 1 CVE
sqlite3 vulnerability
It was discovered that SQLite incorrectly handled query-flattener optimization. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jul 27, 2020 -
UnscoredUSN-4384-1 1 CVE
gnutls28 vulnerability
It was discovered that GnuTLS incorrectly handled session ticket encryption keys. A remote attacker could possibly use this issue to bypass authentication or recover sensitive information.
first Jun 5, 2020 -
Medium max 5.3USN-4375-1 1 CVE
php5, php7.0, php7.2, php7.3, php7.4 vulnerability
It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service.
first May 27, 2020 -
High max 8.6USN-4365-2 2 CVEs
bind9 vulnerabilities
USN-4365-1 fixed several vulnerabilities in Bind. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM. Original advisory details: Lior Shafir, Yehuda Afek, and Anat Bremler-Barr discovered that Bind incorrectly limited certain fet…
first May 20, 2020 -
UnscoredUSN-4409-1 3 CVEs
samba vulnerabilities
Andrew Bartlett discovered that Samba incorrectly handled certain LDAP queries. A remote attacker could use this issue to cause Samba to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ub…
first Jul 2, 2020 -
High max 7.5USN-4370-1 2 CVEs
clamav vulnerabilities
It was discovered that ClamAV incorrectly handled parsing ARJ archives. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2020-3327) It was discovered that ClamAV incorrectly handled parsing PDF f…
first May 21, 2020