8,466 results · Feed
-
UnscoredUSN-4747-1 1 CVE
screen vulnerability
Felix Weinmann discovered that GNU Screen incorrectly handled certain character sequences. A remote attacker could use this issue to cause GNU Screen to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Feb 24, 2021 -
UnscoredUSN-4746-1 1 CVE
xterm vulnerability
Tavis Ormandy discovered that xterm incorrectly handled certain character sequences. A remote attacker could use this issue to cause xterm to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Feb 24, 2021 -
Medium max 5.9USN-4742-1 1 CVE
python-django vulnerability
It was discovered that Django incorrectly accepted semicolons as query parameters. A remote attacker could possibly use this issue to perform a Web Cache Poisoning attack.
first Feb 22, 2021 -
High max 7.5USN-4729-1 1 CVE
openvswitch vulnerability
Joakim Hindersson discovered that Open vSwitch incorrectly parsed certain network packets. A remote attacker could use this issue to cause a denial of service, or possibly alter packet classification.
first Feb 10, 2021 -
Critical max 9.3USN-4728-1 1 CVE
snapd vulnerability
Gilad Reti and Nimrod Stoler discovered that snapd did not correctly specify cgroup delegation when generating systemd service units for various container management snaps. This could allow a local attacker to escalate privileges via access to arbitrary devic…
first Feb 10, 2021 -
UnscoredUSN-4727-1 1 CVE
linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.8, linux-kvm, linux-oem-5.6, linux-oracle, linux-raspi vulnerability
Alexander Popov discovered that multiple race conditions existed in the AF_VSOCK implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code.
first Feb 10, 2021 -
UnscoredUSN-4726-1 0 CVEs
openjdk-8, openjdk-lts vulnerability
It was discovered that OpenJDK incorrectly handled the direct buffering of characters. An attacker could use this issue to cause OpenJDK to crash, resulting in a denial of service, or cause other unspecified impact.
first Feb 9, 2021 -
High max 7.5
php-pear vulnerability
It was discovered that PEAR incorrectly handled symbolic links in archives. A remote attacker could possibly use this issue to execute arbitrary code.
first Feb 8, 2021 -
High max 8.8USN-4720-2 3 CVEs
apport vulnerabilities
USN-4720-1 fixed several vulnerabilities in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Itai Greenhut discovered that Apport incorrectly parsed certain files in the /proc filesystem. A local attacker …
first Feb 3, 2021 -
High max 8.8USN-4720-1 3 CVEs
apport vulnerabilities
Itai Greenhut discovered that Apport incorrectly parsed certain files in the /proc filesystem. A local attacker could use this issue to escalate privileges and run arbitrary code. (CVE-2021-25682, CVE-2021-25683) Itai Greenhut discovered that Apport incorrect…
first Feb 2, 2021 -
UnscoredUSN-4719-1 0 CVEs
ca-certificates update
The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.46 version of the Mozilla certificate authority bundle.
first Feb 2, 2021 -
UnscoredUSN-4718-1 1 CVE
fastd vulnerability
It was discovered that fastd incorrectly handled certain packets. An attacker could possibly use this issue to cause a denial of service.
first Feb 2, 2021 -
Medium max 5.3USN-4715-2 1 CVE
python-django vulnerability
USN-4715-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Wang Baohua discovered that Django incorrectly extracted archive files. A remote attacker could possibly use this issue …
first Feb 1, 2021 -
Medium max 5.3USN-4715-1 1 CVE
python-django vulnerability
Wang Baohua discovered that Django incorrectly extracted archive files. A remote attacker could possibly use this issue to extract files outside of their expected location.
first Feb 1, 2021 -
High max 8.0USN-4714-1 3 CVEs
libxstream-java vulnerabilities
Zhihong Tian and Hui Lu found that XStream was vulnerable to remote code execution. A remote attacker could run arbitrary shell commands by manipulating the processed input stream. (CVE-2020-26217) It was discovered that XStream was vulnerable to server-side …
first Jan 28, 2021 -
High max 7.8
sudo vulnerability
USN-4705-1 fixed a vulnerability in Sudo. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Sudo incorrectly handled memory when parsing command lines. A local attacker c…
first Jan 27, 2021 -
UnscoredUSN-4703-1 1 CVE
mutt vulnerability
It was discovered that Mutt incorrectly handled certain email messages. An attacker could possibly use this issue to cause a denial of service.
first Jan 25, 2021 -
UnscoredUSN-4698-2 0 CVEs
dnsmasq regression
USN-4698-1 fixed vulnerabilities in Dnsmasq. The updates introduced regressions in certain environments related to issues with multiple queries, and issues with retries. This update fixes the problem. Original advisory details: Moshe Kol and Shlomi Oberman di…
first Feb 24, 2021 -
Low max 3.7USN-4698-1 8 CVEs
dnsmasq vulnerabilities
Moshe Kol and Shlomi Oberman discovered that Dnsmasq incorrectly handled memory when sorting RRsets. A remote attacker could use this issue to cause Dnsmasq to hang, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-25681, CVE-20…
first Jan 19, 2021 -
UnscoredUSN-4696-1 1 CVE
htmldoc vulnerability
It was discovered that HTMLDOC incorrectly handled certain HTML files. An attacker could possibly use this issue to cause a denial of service.
first Jan 18, 2021 -
UnscoredUSN-4695-1 7 CVEs
icoutils vulnerabilities
Choongwoo Han discovered that icoutils incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2017-5208) It was discovered that icoutils incorrectly handled certain files. An a…
first Jan 18, 2021 -
UnscoredUSN-4693-1 2 CVEs
ampache vulnerabilities
It was discovered that an SQL injection vulnerability exists in the Ampache search engine. Any user able to perform searches could dump any data contained in the database. An attacker could use this to disclose sensitive information. (CVE-2019-12385) It was d…
first Jan 14, 2021 -
High max 7.2USN-4690-1 1 CVE
coturn vulnerability
It was discovered that coTURN allowed peers to connect and relay packets to loopback addresses in the range of 127.x.x.x. A malicious user could use this vulnerability to insert packages into the loopback interface.
first Jan 11, 2021 -
UnscoredUSN-4689-3 2 CVEs
nvidia-graphics-drivers-418-server, nvidia-graphics-drivers-450-server vulnerabilities
It was discovered that the NVIDIA GPU display driver for the Linux kernel contained a vulnerability that allowed user-mode clients to access legacy privileged APIs. A local attacker could use this to cause a denial of service or escalate privileges. (CVE-2021…
first Jan 20, 2021 -
UnscoredUSN-4684-1 2 CVEs
edk2 vulnerabilities
Laszlo Ersek discovered that EDK II incorrectly validated certain signed images. An attacker could possibly use this issue with a specially crafted image to cause EDK II to hang, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubu…
first Jan 7, 2021 -
UnscoredUSN-4678-1 2 CVEs
linux, linux-hwe-5.8, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oracle, linux-raspi vulnerabilities
It was discovered that the AMD Running Average Power Limit (RAPL) driver in the Linux kernel did not properly restrict access to power data. A local attacker could possibly use this to expose sensitive information. (CVE-2020-12912) Jann Horn discovered that t…
first Jan 6, 2021 -
Medium max 6.1USN-4675-1 1 CVE
horizon vulnerability
Pritam Singh discovered that OpenStack Horizon incorrectly validated certain parameters. An attacker could possibly use this issue to cause OpenStack Horizon to redirect to a malicious URL.
first Jan 5, 2021 -
UnscoredUSN-4669-1 1 CVE
squirrelmail vulnerability
It was discovered that a cross-site scripting (XSS) vulnerability in SquirrelMail allows remote attackers to use malicious script content from HTML e-mail to execute code and/or provoke a denial of service.
first Dec 10, 2020 -
Low max 3.8USN-4664-1 2 CVEs
aptdaemon vulnerabilities
Kevin Backhouse discovered that Aptdaemon incorrectly handled certain properties. A local attacker could use this issue to test for the presence of local files. (CVE-2020-16128) Kevin Backhouse discovered that Aptdaemon incorrectly handled permission checks. …
first Dec 8, 2020 -
Medium max 6.8USN-4661-1 1 CVE
snapcraft vulnerability
It was discovered that Snapcraft includes the current directory when configuring LD_LIBRARY_PATH for application commands. If a user were tricked into installing a malicious snap or downloading a malicious library, under certain circumstances an attacker coul…
first Dec 3, 2020 -
High max 7.5USN-4655-1 2 CVEs
python-werkzeug vulnerabilities
It was discovered that Werkzeug has insufficient debugger PIN randomness. An attacker could use this issue to access sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-14806) It was discovered that Werkzeug incorrectly handled certain…
first Dec 1, 2020 -
High max 7.8
php-pear vulnerabilities
It was discovered that PEAR incorrectly sanitized filenames. A remote attacker could possibly use this issue to execute arbitrary code.
first Dec 1, 2020 -
Medium max 5.2USN-4653-2 1 CVE
containerd vulnerability
USN-4653-1 fixed a vulnerability in containerd. Unfortunately, those containerd packages introduced a regression in docker.io and the update was reverted. This update addresses the docker.io issue and reintroduces the fixes from USN-4653-1. We apologize for t…
first Jan 13, 2021 -
Medium max 5.2USN-4653-1 1 CVE
containerd vulnerability
It was discovered that access controls for the shim’s API socket did not restrict access to the abstract unix domain socket in some cases. An attacker could use this vulnerability to run containers with elevated privileges.
first Nov 30, 2020 -
UnscoredUSN-4652-1 1 CVE
sniffit vulnerability
It was discovered that SniffIt incorrectly handled certain configuration files. An attacker could possibly use this issue to execute arbitrary code.
first Nov 30, 2020 -
UnscoredUSN-4649-2 0 CVEs
xdg-utils regression
USN-4649-1 fixed vulnerabilities in xdg-utils. That update caused a regression by removing the --attach functionality in thunderbird and others applications. This update fix the problem by reverting these changes. Original advisory details: Jens Mueller disco…
first Jan 12, 2021 -
UnscoredUSN-4649-1 1 CVE
xdg-utils vulnerability
Jens Mueller discovered that xdg-utils incorrectly handled certain URI. An attacker could possibly use this issue to expose sensitive information.
first Nov 26, 2020 -
UnscoredUSN-4645-1 1 CVE
mutt vulnerability
It was discovered that Mutt incorrectly handled certain connections. An attacker could possibly use this issue to expose sensitive information.
first Nov 25, 2020 -
UnscoredUSN-4643-1 2 CVEs
atftp vulnerabilities
It was discovered that atftp's FTP server did not properly handler certain input. An attacker could use this to to cause a denial of service (crash) or possibly execute arbitrary code. (CVE-2019-11365) It was discovered that atftp's FTP server did not make pr…
first Nov 24, 2020 -
UnscoredUSN-4642-1 1 CVE
pdfresurrect vulnerability
It was discovered that PDFResurrect incorrectly handled certain memory operations during PDF summary generation. An attacker could use this to cause out-of-bounds writes, resulting in a denial of service (system crash) or arbitrary code execution.
first Nov 24, 2020