8,464 results · Feed
-
Medium max 5.4USN-4217-1 2 CVEs
samba vulnerabilities
Andreas Oster discovered that the Samba DNS management server incorrectly handled certain records. An authenticated attacker could possibly use this issue to crash Samba, resulting in a denial of service. (CVE-2019-14861) Isaac Boukris discovered that Samba d…
first Dec 10, 2019 -
UnscoredUSN-4234-2 0 CVEs
firefox regressions
USN-4234-1 fixed vulnerabilities in Firefox. The update introduced various minor regressions. This update fixes the problems. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tr…
first Jan 30, 2020 -
High max 8.8
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass Content Security Policy (CSP)…
first Jan 9, 2020 -
UnscoredUSN-4233-1 0 CVEs
gnutls28 update
As a security improvement, this update marks SHA1 as being untrusted for digital signature operations.
first Jan 9, 2020 -
UnscoredUSN-4490-1 1 CVE
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerability
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled the XkbSetNames function. A local attacker could possibly use this issue to escalate privileges.
first Sep 8, 2020 -
UnscoredUSN-4203-2 1 CVE
nss vulnerability
USN-4203-1 fixed a vulnerability in NSS. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that NSS incorrectly handled certain memory operations. A remote attacker could use …
first Nov 27, 2019 -
UnscoredUSN-4203-1 1 CVE
nss vulnerability
It was discovered that NSS incorrectly handled certain memory operations. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Nov 27, 2019 -
UnscoredUSN-4214-1 1 CVE
librabbitmq vulnerability
It was discovered that RabbitMQ incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code.
first Dec 5, 2019 -
UnscoredUSN-4199-2 3 CVEs
libvpx vulnerabilities
USN-4199-1 fixed several vulnerabilities in libvpx. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application usin…
first Jul 15, 2020 -
UnscoredUSN-3781-2 0 CVEs
webkit2gtk regression
USN-3781-1 fixed vulnerabilities in WebKitGTK+. The updated package was missing some header files, preventing certain applications from building. This update fixes the problem. We apologize for the inconvenience. Original advisory details: A large number of s…
first Oct 10, 2018 -
Medium max 5.4USN-4217-2 2 CVEs
samba vulnerabilities
USN-4217-1 fixed several vulnerabilities in Samba. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Andreas Oster discovered that the Samba DNS management server incorrectly handled certain records. An authenticat…
first Dec 11, 2019 -
UnscoredUSN-3773-1 2 CVEs
ghostscript vulnerabilities
It was discovered that Ghostscript contained multiple security issues. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use these issues to access arbitrary files, execute arbitrary code, or…
first Oct 1, 2018 -
UnscoredUSN-4206-1 10 CVEs
graphicsmagick vulnerabilities
It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-10794, CVE-2017-10799, CVE-2017-11102, CVE-2017-11140, CVE-2017-11403, CVE-2017-11636, CVE-2017-11…
first Dec 2, 2019 -
UnscoredUSN-3767-1 2 CVEs
glib2.0 vulnerabilities
It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2018-16428) It was discovered that GLib incorrectly handled certain files. An attacker could …
first Sep 19, 2018 -
UnscoredUSN-3713-1 4 CVEs
cups vulnerabilities
It was discovered that CUPS incorrectly handled certain print jobs with invalid usernames. A remote attacker could possibly use this issue to cause CUPS to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 17.10 and Ub…
first Jul 11, 2018 -
UnscoredUSN-3770-1 2 CVEs
lcms2 vulnerabilities
Ibrahim El-Sayed discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-10165) Quang Nguyen discovered that Little CMS incorrectly handled certain files. An attacker coul…
first Sep 20, 2018 -
High max 7.0USN-3777-1 7 CVEs
linux, linux-aws, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerabilities
Jann Horn discovered that the vmacache subsystem did not properly handle sequence number overflows, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2018-171…
first Oct 1, 2018 -
UnscoredUSN-3778-1 3 CVEs
firefox vulnerabilities
A crash was discovered in TransportSecurityInfo used for SSL, which could be triggered by data stored in the local cache directory. An attacker could potentially exploit this in combination with another vulnerability that allowed them to write data to the cac…
first Oct 3, 2018 -
UnscoredUSN-3782-1 2 CVEs
liblouis vulnerabilities
Henri Salo discovered that Liblouis incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-12085) It was discovered that Liblouis incorrectly handled certain files. An attacker could possibly use this…
first Oct 3, 2018 -
UnscoredUSN-3772-1 1 CVE
udisks2 vulnerability
It was discovered that UDisks incorrectly handled format strings when logging. A local attacker could possibly use this issue to cause a denial of service or obtain sensitive information.
first Sep 26, 2018 -
UnscoredUSN-4214-2 1 CVE
librabbitmq vulnerability
USN-4214-1 fixed a vulnerability in RabbitMQ. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that RabbitMQ incorrectly handled certain inputs. An attacker could possibly u…
first Dec 11, 2019 -
UnscoredUSN-3764-1 3 CVEs
zsh vulnerabilities
It was discovered that Zsh incorrectly handled certain scripts. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-0502, CVE-2018-13259) Richard Maciel Costa discovered that Zsh incorrectly handled certain scripts. An attacker coul…
first Sep 11, 2018 -
UnscoredUSN-3783-1 3 CVEs
apache2 vulnerabilities
Robert Swiecki discovered that the Apache HTTP Server HTTP/2 module incorrectly destroyed certain streams. A remote attacker could possibly use this issue to cause the server to crash, leading to a denial of service. (CVE-2018-1302) Craig Young discovered tha…
first Oct 3, 2018 -
UnscoredUSN-3761-2 0 CVEs
firefox regressions
USN-3761-1 fixed vulnerabilities in Firefox. The update caused several regressions affecting spellchecker dictionaries and search engines. This update fixes the problems. We apologize for the inconvenience. Original advisory details: Multiple security issues …
first Sep 13, 2018 -
High max 7.5USN-3769-1 1 CVE
bind9 vulnerability
It was discovered that Bind incorrectly handled the deny-answer-aliases feature. If this feature is enabled, a remote attacker could use this issue to cause Bind to crash, resulting in a denial of service.
first Sep 20, 2018 -
UnscoredUSN-3761-1 5 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, or execute arbitrary code. (CVE-2018-12375, CVE-2018-12376, CVE-20…
first Sep 6, 2018 -
UnscoredUSN-3761-3 0 CVEs
firefox regressions
USN-3761-1 fixed vulnerabilities in Firefox. The update caused several regressions affecting spellchecker dictionaries and search engines, which were partially fixed by USN-3761-2. This update contains the remaining fix. We apologize for the inconvenience. Or…
first Sep 17, 2018 -
UnscoredUSN-4202-2 0 CVEs
thunderbird regression
USN-4202-1 fixed vulnerabilities in Thunderbird. After upgrading, Thunderbird created a new profile for some users. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that a specially crafted S/MIME…
first Dec 10, 2019 -
UnscoredUSN-3781-1 24 CVEs
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site …
first Oct 3, 2018 -
UnscoredUSN-3758-1 5 CVEs
libx11 vulnerabilities
Tobias Stoeckmann discovered that libx11 incorrectly handled certain images. An attacker could possibly use this issue to access sensitive information (CVE-2016-7942) Tobias Stoeckmann discovered that libx11 incorrectly handled certain inputs. An attacker cou…
first Aug 30, 2018 -
UnscoredUSN-3750-1 1 CVE
pango1.0 vulnerability
Jeffrey M. discovered that Pango incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service.
first Aug 22, 2018 -
UnscoredUSN-3757-1 1 CVE
poppler vulnerability
Hosein Askari discovered that poppler incorrectly handled certain PDF files. An attacker could possible use this issue to cause a denial of service.
first Aug 29, 2018 -
UnscoredUSN-3746-1 1 CVE
apt vulnerability
It was discovered that APT incorrectly handled the mirror method (mirror://). If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages in environments configured to use mirror://…
first Aug 20, 2018 -
UnscoredUSN-3749-1 1 CVE
mozjs52 vulnerabilities
Multiple memory safety issues were fixed in Spidermonkey. An attacker could potentially exploit these to cause a denial of service, or execute arbitrary code.
first Aug 22, 2018 -
High max 8.5USN-3744-1 2 CVEs
postgresql-10, postgresql-9.3, postgresql-9.5 vulnerabilities
Andrew Krasichkov discovered that the PostgreSQL client library incorrectly reset its internal state between connections. A remote attacker could possibly use this issue to bypass certain client-side connection security features. This issue only affected Ubun…
first Aug 16, 2018 -
UnscoredUSN-3755-1 2 CVEs
libgd2 vulnerabilities
It was discovered that GD incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-1000222) It was discovered that GD incorrectly handled certain GIF files. An attacker could possibly use this issue to…
first Aug 27, 2018 -
UnscoredUSN-3768-1 16 CVEs
ghostscript vulnerabilities
Tavis Ormandy discovered multiple security issues in Ghostscript. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use these issues to access arbitrary files, execute arbitrary code, or caus…
first Sep 19, 2018 -
High max 7.8USN-3776-1 9 CVEs
linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
Jann Horn discovered that the vmacache subsystem did not properly handle sequence number overflows, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2018-171…
first Oct 1, 2018 -
Low max 2.3USN-3762-1 2 CVEs
linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities
It was discovered that the VirtIO subsystem in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to possibly expose sensitive information (kernel memory). (CVE-2018-1118) Seunghun Han discovered an informa…
first Sep 11, 2018 -
High max 7.8
linux vulnerabilities
It was discovered that the paravirtualization implementation in the Linux kernel did not properly handle some indirect calls, reducing the effectiveness of Spectre v2 mitigations for paravirtual guests. A local attacker could use this to expose sensitive info…
first Oct 1, 2018