8,464 results · Feed
-
UnscoredUSN-3611-1 1 CVE
openssl vulnerability
It was discovered that OpenSSL incorrectly handled certain ASN.1 types. A remote attacker could possibly use this issue to cause a denial of service.
first Mar 28, 2018 -
UnscoredUSN-3593-1 7 CVEs
zsh vulnerabilities
It was discovered that Zsh incorrectly handled certain enviroment variables. An attacker could possibly use this issue to gain privileged access to the system. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-10070) It was discovered that Zsh incorrectly …
first Mar 8, 2018 -
UnscoredUSN-3635-1 18 CVEs
webkit2gtk vulnerabilities
A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site …
first Apr 30, 2018 -
UnscoredUSN-3626-1 4 CVEs
ruby1.9.1, ruby2.0, ruby2.3 vulnerabilities
It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this to execute arbitrary code. (CVE-2018-6914) It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this to access sensit…
first Apr 16, 2018 -
UnscoredUSN-3609-1 1 CVE
firefox vulnerability
A use-after-free was discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service or execute arbitrary code.
first Mar 27, 2018 -
Medium max 4.0USN-3606-1 12 CVEs
tiff vulnerabilities
It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute …
first Mar 26, 2018 -
High max 7.5USN-3586-1 4 CVEs
isc-dhcp vulnerabilities
Konstantin Orekhov discovered that the DHCP server incorrectly handled a large number of concurrent TCP sessions. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CV…
first Mar 1, 2018 -
High max 7.5USN-4435-1 3 CVEs
clamav vulnerabilities
It was discovered that ClamAV incorrectly handled parsing ARJ archives. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2020-3327) It was discovered that ClamAV incorrectly handled scanning mali…
first Jul 27, 2020 -
UnscoredUSN-3602-1 27 CVEs
tiff vulnerabilities
It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute …
first Mar 20, 2018 -
UnscoredUSN-3608-1 2 CVEs
zsh vulnerabilities
Richard Maciel Costa discovered that Zsh incorrectly handled certain inputs. An attacker could possibly use this to cause a denial of service. (CVE-2018-1071) It was discovered that Zsh incorrectly handled certain files. An attacker could possibly use this to…
first Mar 27, 2018 -
UnscoredUSN-3596-2 0 CVEs
firefox regression
USN-3596-1 fixed vulnerabilities in Firefox. The update caused an issue where it was not possible to customize the toolbars when running Firefox in Unity. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple s…
first Apr 6, 2018 -
UnscoredUSN-3599-1 1 CVE
firefox vulnerability
An out-of-bounds write was discovered when processing Vorbis audio data. If a user were tricked in to opening a specially crafted website, an attacker could exploit this to cause a denial of service, or execute arbitrary code. (CVE-2018-5146)
first Mar 16, 2018 -
UnscoredUSN-3595-1 2 CVEs
samba vulnerabilities
Björn Baumbach discovered that Samba incorrectly validated permissions when changing account passwords via LDAP. An authenticated attacker could use this issue to change the password of other users, including administrators, and perform actions as those users…
first Mar 13, 2018 -
UnscoredUSN-3568-1 1 CVE
wavpack vulnerabilities
Hanno Böck discovered that WavPack incorrectly handled certain WV files. An attacker could possibly use this to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-10169) Joonun Jang discovered that WavPack inc…
first Feb 12, 2018 -
UnscoredUSN-3564-1 1 CVE
postgresql-9.3, postgresql-9.5, postgresql-9.6 vulnerability
It was discovered that PostgreSQL incorrectly handled certain temp files. An attacker could possibly use this to access sensitive information.
first Feb 9, 2018 -
UnscoredUSN-3558-1 2 CVEs
systemd vulnerabilities
Karim Hossen & Thomas Imbert and Nelson William Gamazo Sanchez independently discovered that systemd-resolved incorrectly handled certain DNS responses. A remote attacker could possibly use this issue to cause systemd to temporarily stop responding, resulting…
first Feb 5, 2018 -
UnscoredUSN-3625-1 6 CVEs
perl vulnerabilities
It was discovered that Perl incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause Perl to hang, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-8853) It was discovered that P…
first Apr 16, 2018 -
UnscoredUSN-3562-1 1 CVE
miniupnpc vulnerabilities
It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service or possibly execute arbitrary code with privileges of the user running an application that uses the MiniUPnP library.
first Feb 7, 2018 -
UnscoredUSN-3596-1 17 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash or opening new tabs, escape the sandbox, bypa…
first Mar 14, 2018 -
UnscoredUSN-3592-1 2 CVEs
clamav vulnerabilities
It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-0202) Hanno Böck discovered that Clam…
first Mar 8, 2018 -
UnscoredUSN-3571-1 4 CVEs
erlang vulnerabilities
It was discovered that the Erlang FTP module incorrectly handled certain CRLF sequences. A remote attacker could possibly use this issue to inject arbitrary FTP commands. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-1693) It was discovered that Erlang…
first Feb 14, 2018 -
Medium max 5.6USN-3561-1 1 CVE
libvirt update
It was discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. An attacker in the guest could use this to expose sensitive guest informat…
first Feb 7, 2018 -
Medium max 4.8USN-3566-2 5 CVEs
php5 vulnerabilities
USN-3566-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to access sensiti…
first May 22, 2019 -
Medium max 5.6USN-3583-1 25 CVEs
linux vulnerabilities
It was discovered that an out-of-bounds write vulnerability existed in the Flash-Friendly File System (f2fs) in the Linux kernel. An attacker could construct a malicious file system that, when mounted, could cause a denial of service (system crash) or possibl…
first Feb 23, 2018 -
UnscoredUSN-3556-1 1 CVE
dovecot vulnerability
It was discovered that Dovecot incorrectly handled certain authentications. An attacker could possibly use this to cause a denial of service.
first Feb 1, 2018 -
UnscoredUSN-3569-1 2 CVEs
libvorbis vulnerabilities
It was discovered that libvorbis incorrectly handled certain sound files. An attacker could possibly use this to execute arbitrary code. (CVE-2017-14632) It was discovered that libvorbis incorrectly handled certain sound files. An attacker could use this to c…
first Feb 13, 2018 -
UnscoredUSN-3566-1 3 CVEs
php5 vulnerabilities
It was discovered that PHP incorrectly handled the PHAR 404 error page. A remote attacker could possibly use this issue to conduct cross-site scripting (XSS) attacks. (CVE-2018-5712) It was discovered that PHP incorrectly handled memory when unserializing cer…
first Feb 12, 2018 -
UnscoredUSN-3579-1 1 CVE
libreoffice vulnerability
It was discovered that =WEBSERVICE calls in a document could be used to read arbitrary files. If a user were tricked in to opening a specially crafted document, a remote attacker could exploit this to obtain sensitive information. (CVE-2018-6871)
first Feb 21, 2018 -
Critical max 9.8
exim4 vulnerability
Meh Chang discovered that Exim incorrectly handled memory in certain decoding operations. A remote attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Feb 12, 2018 -
UnscoredUSN-3545-1 6 CVEs
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, or execute arbitrary code. (CVE-2018-512…
first Mar 29, 2018 -
Critical max 9.8USN-3598-1 3 CVEs
curl vulnerabilities
Phan Thanh discovered that curl incorrectly handled certain FTP paths. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-2018-1000120) Dario Weisser discovered that curl incorrectly handled certain LDAP URLs. An …
first Mar 15, 2018 -
Medium max 5.9USN-3587-1 2 CVEs
dovecot vulnerabilities
It was discovered that Dovecot incorrectly handled parsing certain email addresses. A remote attacker could use this issue to cause Dovecot to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2017-14461) It was discovere…
first Mar 5, 2018 -
UnscoredUSN-3552-1 1 CVE
firefox vulnerability
Johann Hofmann discovered that HTML fragments created for chrome-privileged documents were not properly sanitized. An attacker could exploit this to execute arbitrary code. (CVE-2018-5124)
first Jan 31, 2018 -
UnscoredUSN-3547-1 2 CVEs
libtasn1-6 vulnerabilities
It was discovered that Libtasn1 incorrectly handled certain files. If a user were tricked into opening a crafted file, an attacker could possibly use this to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-…
first Jan 25, 2018 -
Medium max 5.6USN-3582-1 6 CVEs
linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
Mohamed Ghannam discovered that the IPv4 raw socket implementation in the Linux kernel contained a race condition leading to uninitialized pointer usage. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. (CVE-201…
first Feb 22, 2018 -
UnscoredUSN-3544-1 30 CVEs
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, spoof the origin in audio capture prompts, t…
first Jan 24, 2018 -
Medium max 5.6USN-3594-1 1 CVE
linux vulnerability
USN-3542-1 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64 architecture in Ubuntu 14.04 LTS. This update provides the compiler-based retpoline kernel mitigation for the amd64 and i386 architectures. Original advisory details: Jann Horn discovered th…
first Mar 9, 2018 -
UnscoredUSN-3550-1 7 CVEs
clamav vulnerabilities
It was discovered that ClamAV incorrectly handled parsing certain mail messages. A remote attacker could use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12374, CVE-2017-12375, CVE-2017-1…
first Jan 30, 2018 -
Medium max 5.6USN-3542-1 2 CVEs
linux vulnerabilities
Jann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, includ…
first Jan 23, 2018 -
UnscoredUSN-3590-1 5 CVEs
irssi vulnerabilities
It was discovered that Irssi incorrectly handled certain empty nick names. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-7050) It was discovered that Irssi incorrectly handled certain nick names. An attacker could possibly …
first Mar 6, 2018