8,464 results · Feed
-
UnscoredUSN-4937-1 1 CVE
gnome-autoar vulnerability
Ondrej Holy discovered that GNOME Autoar could extract files outside of the intended directory. If a user were tricked into extracting a specially crafted archive, a remote attacker could create files in arbitrary locations, possibly leading to code execution.
first May 6, 2021 -
UnscoredUSN-4410-1 1 CVE
net-snmp vulnerability
A double-free bug was discovered in snmpd server. An authenticated user could potentially cause a DoS by sending a crafted request to the server. (CVE-2019-20892)
first Jul 2, 2020 -
UnscoredUSN-4307-1 0 CVEs
apache2 update
As a security improvement, this update adds TLSv1.3 support to the Apache HTTP Server package in Ubuntu 18.04 LTS. TLSv1.3 is enabled by default, and in certain environments may cause compatibility issues. The SSLProtocol directive may be used to disable TLSv…
first Mar 18, 2020 -
UnscoredUSN-4359-2 1 CVE
apt vulnerability
USN-4359-1 fixed a vulnerability in APT. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM. Original advisory details: It was discovered that APT incorrectly handled certain filenames during package installation. If an attacker …
first May 28, 2020 -
UnscoredUSN-4341-3 0 CVEs
samba regression
USN-4341-1 fixed vulnerabilities in Samba. The updated packages for Ubuntu 16.04 LTS introduced a regression when using LDAP. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Samba incorrectl…
first Apr 29, 2020 -
UnscoredUSN-4404-2 3 CVEs
linux kernel vulnerabilities
USN-4404-1 fixed vulnerabilities in the NVIDIA graphics drivers. This update provides the corresponding updates for the NVIDIA Linux DKMS kernel modules. Original advisory details: Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not prop…
first Jun 25, 2020 -
High max 8.6USN-4365-1 2 CVEs
bind9 vulnerabilities
Lior Shafir, Yehuda Afek, and Anat Bremler-Barr discovered that Bind incorrectly limited certain fetches. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to a denial of service, or possibly use Bind to perform a ref…
first May 19, 2020 -
High max 7.5USN-4341-1 2 CVEs
samba vulnerabilities
Andrei Popa discovered that Samba incorrectly handled certain LDAP queries. A remote attacker could use this issue to cause Samba to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.10 and Ubuntu …
first Apr 28, 2020 -
UnscoredUSN-4275-1 2 CVEs
qtbase-opensource-src vulnerabilities
It was discovered that Qt incorrectly handled certain PPM images. If a user or automated system were tricked into opening a specially crafted PPM file, a remote attacker could cause Qt to crash, resulting in a denial of service. This issue only affected Ubunt…
first Feb 10, 2020 -
UnscoredUSN-4310-1 1 CVE
webkit2gtk vulnerability
A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site …
first Mar 30, 2020 -
UnscoredUSN-4367-2 0 CVEs
linux regression
USN-4367-1 fixed vulnerabilities in the 5.4 Linux kernel. Unfortunately, that update introduced a regression in overlayfs. This update corrects the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the btrfs implem…
first May 28, 2020 -
UnscoredUSN-4340-1 2 CVEs
cups vulnerabilities
It was discovered that CUPS incorrectly handled certain language values. A local attacker could possibly use this issue to cause CUPS to crash, leading to a denial of service, or possibly obtain sensitive information. This issue only applied to Ubuntu 16.04 L…
first Apr 27, 2020 -
UnscoredUSN-4360-2 0 CVEs
json-c regression
USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak in some scenarios. This update reverts the security fix pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that …
first May 15, 2020 -
UnscoredUSN-4383-1 8 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the addressbar, or execute arbitrary code. (CVE-2020-12405, …
first Jun 4, 2020 -
UnscoredUSN-4353-2 0 CVEs
firefox regression
USN-4353-1 fixed vulnerabilities in Firefox. The update caused a regression that impaired the functionality of some addons. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered …
first May 12, 2020 -
UnscoredUSN-4323-1 6 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, or execute arbitrary code. (CVE-2020…
first Apr 7, 2020 -
Low max 3.3USN-4355-1 1 CVE
pulseaudio vulnerability
PulseAudio in Ubuntu contains additional functionality to mediate audio recording for snap packages and it was discovered that this functionality did not mediate PulseAudio module unloading. An attacker-controlled snap with only the audio-playback interface c…
first May 12, 2020 -
High max 7.5USN-4370-2 2 CVEs
clamav vulnerabilities
USN-4370-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled parsing ARJ archives. A remote attacker could po…
first May 21, 2020 -
UnscoredUSN-4359-1 1 CVE
apt vulnerability
It was discovered that APT incorrectly handled certain filenames during package installation. If an attacker could provide a specially crafted package to be installed by the system administrator, this could cause APT to crash.
first May 14, 2020 -
UnscoredUSN-4360-3 0 CVEs
json-c regression
USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak in some scenarios. This update reverts the security fix pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that …
first May 15, 2020 -
High max 8.8USN-4339-1 12 CVEs
openexr vulnerabilities
Brandon Perry discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code. This issue only a…
first Apr 27, 2020 -
UnscoredUSN-4352-2 1 CVE
openldap vulnerability
USN-4352-1 fixed a vulnerability in OpenLDAP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that OpenLDAP incorrectly handled certain queries. A remote attacker could poss…
first May 6, 2020 -
High max 7.5USN-4361-1 3 CVEs
dovecot vulnerabilities
Philippe Antoine discovered that Dovecot incorrectly handled certain data. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-10957, CVE-2020-10967) Philippe Antoine discovered that Dovecot incorrectly handled certain data. An a…
first May 18, 2020 -
High max 7.7USN-4362-1 5 CVEs
dpdk vulnerabilities
It was discovered that DPDK incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2020-10722, CVE-2020-10723, CVE-2020-10724, CVE-2020-10725, CVE-2020-10726)
first May 18, 2020 -
UnscoredUSN-4331-1 1 CVE
webkit2gtk vulnerability
A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site …
first Apr 20, 2020 -
High max 7.4USN-4330-2 3 CVEs
php7.4 vulnerabilities
USN-4330-1 fixed vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 20.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled certain EXIF files. An attacker could possibly use this issue to access sens…
first May 6, 2020 -
UnscoredUSN-4276-1 2 CVEs
Yubico PIV Tool vulnerabilities
It was discovered that libykpiv, a supporting library of the Yubico PIV Tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker with a custom-made, malicious USB device could potentially execute arbitrary code on a computer running the Y…
first Feb 11, 2020 -
High max 7.5USN-4330-1 5 CVEs
php5, php7.0, php7.2, php7.3 vulnerabilities
It was discovered that PHP incorrectly handled certain file uploads. An attacker could possibly use this issue to cause a crash. (CVE-2020-7062) It was discovered that PHP incorrectly handled certain PHAR archive files. An attacker could possibly use this iss…
first Apr 15, 2020 -
Medium max 6.5USN-4304-1 1 CVE
ceph vulnerability
Or Friedman discovered that Ceph incorrectly handled disconnects. A remote authenticated attacker could possibly use this issue to cause Ceph to consume resources, leading to a denial of service.
first Mar 17, 2020 -
UnscoredUSN-4353-1 8 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass security restrictions, spoof the URL bar, or execute arbitr…
first May 7, 2020 -
High max 8.1
firefox vulnerabilities
Two use-after-free bugs were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could exploit these to cause a denial of service or execute arbitrary code.
first Apr 4, 2020 -
UnscoredUSN-4305-1 1 CVE
icu vulnerability
André Bargull discovered that ICU incorrectly handled certain strings. An attacker could possibly use this issue to execute arbitrary code.
first Mar 17, 2020 -
High max 7.5USN-4280-2 1 CVE
clamav vulnerability
USN-4280-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled memory when the Data-Loss-Prevention (DLP) featur…
first Feb 18, 2020 -
Medium max 6.5USN-4279-1 3 CVEs
php5, php7.0, php7.2, php7.3 vulnerabilities
It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04 LTS. (CVE-2015-9253) It was discovered that PH…
first Feb 17, 2020 -
UnscoredUSN-4311-1 2 CVEs
bluez vulnerabilities
It was discovered that BlueZ incorrectly handled bonding HID and HOGP devices. A local attacker could possibly use this issue to impersonate non-bonded devices. (CVE-2020-0556) It was discovered that BlueZ incorrectly handled certain commands. A local attacke…
first Mar 30, 2020 -
High max 7.5USN-4280-1 1 CVE
clamav vulnerability
It was discovered that ClamAV incorrectly handled memory when the Data-Loss-Prevention (DLP) feature was enabled. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service.
first Feb 18, 2020 -
UnscoredUSN-4352-1 1 CVE
openldap vulnerability
It was discovered that OpenLDAP incorrectly handled certain queries. A remote attacker could possibly use this issue to cause OpenLDAP to consume resources, resulting in a denial of service.
first May 6, 2020 -
Low max 3.1USN-4282-1 1 CVE
postgresql-10, postgresql-11 vulnerability
It was discovered that PostgreSQL incorrectly performed authorization checks when handling the "ALTER ... DEPENDS ON EXTENSION" sub-commands. A remote attacker could possibly use this issue to drop any function, procedure, materialized view, index, or trigger…
first Feb 18, 2020 -
UnscoredUSN-4278-2 4 CVEs
firefox vulnerabilities
USN-4278-1 fixed vulnerabilities in Firefox. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, …
first Feb 26, 2020 -
Medium max 5.3USN-4327-1 1 CVE
libssh vulnerability
Yasheng Yang discovered that libssh incorrectly handled AES-CTR ciphers. A remote attacker could possibly use this issue to cause libssh to crash, resulting in a denial of service.
first Apr 9, 2020