8,464 results · Feed
-
UnscoredUSN-3803-1 3 CVEs
ghostscript vulnerabilities
Tavis Ormandy discovered multiple security issues in Ghostscript. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use these issues to access arbitrary files, execute arbitrary code, or caus…
first Oct 30, 2018 -
High max 7.8USN-3816-1 3 CVEs
systemd vulnerabilities
Jann Horn discovered that unit_deserialize incorrectly handled status messages above a certain length. A local attacker could potentially exploit this via NotifyAccess to inject arbitrary state across re-execution and obtain root privileges. (CVE-2018-15686) …
first Nov 12, 2018 -
High max 8.0USN-3818-1 1 CVE
postgresql-10 vulnerability
It was discovered that PostgreSQL incorrectly handled certain trigger definitions when running pg_upgrade or pg_dump. A remote attacker could possibly use this issue to execute arbitrary SQL statements with superuser privileges.
first Nov 14, 2018 -
UnscoredUSN-3848-1 4 CVEs
linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that a double free existed in the AMD GPIO driver in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-18174) It was discovered that an integer overrun…
first Dec 20, 2018 -
Medium max 6.5USN-3817-1 5 CVEs
python2.7, python3.4, python3.5 vulnerabilities
It was discovered that Python incorrectly handled large amounts of data. A remote attacker could use this issue to cause Python to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubunt…
first Nov 13, 2018 -
UnscoredUSN-3802-1 1 CVE
xorg-server, xorg-server-hwe-16.04 vulnerability
Narendra Shinde discovered that the X.Org X server incorrectly handled certain command line parameters when running as root with the legacy wrapper. When certain graphics drivers are being used, a local attacker could possibly use this issue to overwrite arbi…
first Oct 26, 2018 -
UnscoredUSN-3816-3 0 CVEs
systemd regression
USN-3816-1 fixed vulnerabilities in systemd. The fix for CVE-2018-6954 caused a regression in systemd-tmpfiles when running Ubuntu inside a container on some older kernels. This issue only affected Ubuntu 16.04 LTS. In order to continue to support this config…
first Nov 27, 2018 -
UnscoredUSN-3801-2 0 CVEs
firefox regressions
USN-3801-1 fixed vulnerabilities in Firefox. The update introduced various minor regressions. This update fixes the problems. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tr…
first Nov 23, 2018 -
UnscoredUSN-3798-1 8 CVEs
linux vulnerabilities
Dmitry Vyukov discovered that the key management subsystem in the Linux kernel did not properly restrict adding a key that already exists but is negatively instantiated. A local attacker could use this to cause a denial of service (system crash) or possibly e…
first Oct 23, 2018 -
UnscoredUSN-3800-1 2 CVEs
audiofile vulnerabilities
It was discovered that audiofile incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-13440) It was discovered that audiofile incorrectly handled certain files. An attacker could possibly use thi…
first Oct 24, 2018 -
High max 7.8USN-3816-2 1 CVE
systemd vulnerability
USN-3816-1 fixed several vulnerabilities in systemd. However, the fix for CVE-2018-6954 was not sufficient. This update provides the remaining fixes. We apologize for the inconvenience. Original advisory details: Jann Horn discovered that unit_deserialize inc…
first Nov 19, 2018 -
UnscoredUSN-3801-1 12 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass CSP restrictions, spoof the protocol registration notificat…
first Oct 24, 2018 -
UnscoredUSN-3793-1 5 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, or execute arbitrary code. (CVE-2018-123…
first Oct 15, 2018 -
UnscoredUSN-3814-2 2 CVEs
clamav vulnerabilities
Updated: 2018-11-21: The embedded version of libmspack in ClamAV was found to not be affected by the listed vulnerabilities, therefore the following is not applicable. USN-3814-1 fixed several vulnerabilities in libmspack. In Ubuntu 14.04 libmspack is include…
first Nov 13, 2018 -
High max 8.8USN-3807-1 1 CVE
network-manager vulnerability
Felix Wilhelm discovered that the NetworkManager internal DHCPv6 client incorrectly handled certain DHCPv6 messages. In non-default configurations where the internal DHCP client is enabled, an attacker on the same network could use this issue to cause Network…
first Nov 5, 2018 -
UnscoredUSN-3795-3 0 CVEs
libssh regression
USN-3795-1 and USN-3795-2 fixed a vulnerability in libssh. The upstream fix introduced a regression. This update fixes the problem. Original advisory details: Peter Winter-Smith discovered that libssh incorrectly handled authentication when being used as a se…
first Nov 29, 2018 -
UnscoredUSN-3786-1 11 CVEs
libxkbcommon vulnerabilities
It was discovered that libxkbcommon incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-15853, CVE-2018-15854, CVE-2018-15855, CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859, CVE…
first Oct 8, 2018 -
High max 8.8USN-3806-1 1 CVE
systemd vulnerability
Felix Wilhelm discovered that the systemd-networkd DHCPv6 client incorrectly handled certain DHCPv6 messages. In configurations where systemd-networkd is being used, an attacker on the same network could use this issue to cause systemd-networkd to crash, resu…
first Nov 5, 2018 -
UnscoredUSN-3788-1 2 CVEs
texlive-bin vulnerabilities
Jakub Wilk discovered that Tex Live incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-5700) It was discovered that Tex Live incorrectly handled certain …
first Oct 11, 2018 -
UnscoredUSN-3815-1 1 CVE
gettext vulnerability
It was discovered that gettext incorrectly handled certain messages. An attacker could possibly use this issue to execute arbitrary code.
first Nov 12, 2018 -
UnscoredUSN-3814-1 2 CVEs
libmspack vulnerabilities
It was discovered libmspack incorrectly handled certain malformed CAB files. A remote attacker could use this issue to cause libmspack to crash, resulting in a denial of service. (CVE-2018-18584, CVE-2018-18585)
first Nov 12, 2018 -
UnscoredUSN-3785-1 13 CVEs
imagemagick vulnerabilities
Due to a large number of issues discovered in GhostScript that prevent it from being used by ImageMagick safely, this update includes a default policy change that disables support for the Postscript and PDF formats in ImageMagick. This policy can be overridde…
first Oct 4, 2018 -
UnscoredUSN-3797-1 4 CVEs
linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
Noam Rathaus discovered that a use-after-free vulnerability existed in the Infiniband implementation in the Linux kernel. An attacker could use this to cause a denial of service (system crash). (CVE-2018-14734) It was discovered that an integer overflow exist…
first Oct 23, 2018 -
UnscoredUSN-3786-2 11 CVEs
libxkbcommon vulnerabilities
USN-3786-1 fixed several vulnerabilities in libxkbcommon. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: It was discovered that libxkbcommon incorrectly handled certain files. An attacker could possibly use this…
first Nov 6, 2018 -
UnscoredUSN-3831-1 4 CVEs
ghostscript vulnerabilities
It was discovered that Ghostscript contained multiple security issues. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use these issues to access arbitrary files, execute arbitrary code, or…
first Nov 29, 2018 -
UnscoredUSN-4233-2 0 CVEs
gnutls28 update
USN-4233-1 disabled SHA1 being used for digital signature operations in GnuTLS. In certain network environments, certificates using SHA1 may still be in use. This update adds the %VERIFY_ALLOW_BROKEN and %VERIFY_ALLOW_SIGN_WITH_SHA1 priority strings that can …
first Jan 23, 2020 -
UnscoredUSN-3789-1 1 CVE
clamav vulnerability
It was discovered that ClamAV incorrectly handled unpacking MEW executables. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service.
first Oct 11, 2018 -
Critical max 9.1USN-3795-1 1 CVE
libssh vulnerability
Peter Winter-Smith discovered that libssh incorrectly handled authentication when being used as a server. A remote attacker could use this issue to bypass authentication without any credentials.
first Oct 17, 2018 -
UnscoredUSN-4236-1 1 CVE
libgcrypt20 vulnerability
It was discovered that Libgcrypt was susceptible to a ECDSA timing attack. An attacker could possibly use this attack to recover sensitive information.
first Jan 13, 2020 -
Medium max 4.4USN-3805-1 3 CVEs
curl vulnerabilities
Harry Sintonen discovered that curl incorrectly handled SASL authentication. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-16839) Brian Carpenter discovered that …
first Oct 31, 2018 -
UnscoredUSN-4222-1 15 CVEs
graphicsmagick vulnerabilities
It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.
first Dec 16, 2019 -
High max 7.5USN-4230-2 1 CVE
clamav vulnerability
USN-4230-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled certain MIME messages. A remote attacker could po…
first Jan 23, 2020 -
UnscoredUSN-3792-1 1 CVE
net-snmp vulnerability
It was discovered that Net-SNMP incorrectly handled certain certain crafted packets. A remote attacker could possibly use this issue to cause Net-SNMP to crash, resulting in a denial of service.
first Oct 15, 2018 -
High max 7.5USN-4230-1 1 CVE
clamav vulnerability
It was discovered that ClamAV incorrectly handled certain MIME messages. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service.
first Jan 8, 2020 -
UnscoredUSN-4216-2 9 CVEs
firefox vulnerabilities
USN-4216-1 fixed vulnerabilities in Firefox. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, …
first Dec 13, 2019 -
UnscoredUSN-4232-1 11 CVEs
graphicsmagick vulnerabilities
It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.
first Jan 8, 2020 -
UnscoredUSN-3784-1 0 CVEs
AppArmor update
As a security improvement, this update adjusts the private-files abstraction to disallow writing to thumbnailer configuration files. Additionally adjust the private-files, private-files-strict and user-files abstractions to disallow writes on parent directori…
first Oct 4, 2018 -
High max 7.1USN-4219-1 1 CVE
libssh vulnerability
It was discovered that libssh incorrectly handled certain scp commands. If a user or automated system were tricked into using a specially-crafted scp command, a remote attacker could execute arbitrary commands on the server.
first Dec 10, 2019 -
UnscoredUSN-4218-1 1 CVE
eglibc vulnerability
Jakub Wilk discovered that GNU C Library incorrectly handled certain memory alignments. An attacker could possibly use this issue to execute arbitrary code or cause a crash.
first Dec 10, 2019 -
UnscoredUSN-4216-1 9 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, or execute arbitrary code.
first Dec 9, 2019