8,466 results · Feed
-
High max 8.8USN-4629-1 2 CVEs
moin vulnerabilities
Michael Chapman discovered that MoinMoin incorrectly handled certain cache actions. An attacker could possibly use this issue to execute arbitrary code. (CVE-2020-25074) Catarina Leite discovered that MoinMoin incorrectly handled certain SVG files. An attacke…
first Nov 11, 2020 -
UnscoredUSN-4628-3 3 CVEs
intel-microcode vulnerabilities
USN-4628-1 provided updated Intel Processor Microcode for various processor types. This update provides the corresponding updates for some additional processor types. Original advisory details: Moritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Cathe…
first May 17, 2021 -
UnscoredUSN-4621-1 5 CVEs
netqmail vulnerabilities
It was discovered that netqmail did not properly handle certain input. Both remote and local attackers could use this vulnerability to cause netqmail to crash or execute arbitrary code. (CVE-2005-1513, CVE-2005-1514, CVE-2005-1515) It was discovered that netq…
first Nov 5, 2020 -
UnscoredUSN-4620-1 1 CVE
phpldapadmin vulnerability
It was discovered that phpLDAPadmin didn't properly sanitize before being echoed to the user. A remote attacker could inject arbitrary HTML/Javascript code in a user's context and cause a crash, resulting in denial of service or potential execution of arbitra…
first Nov 5, 2020 -
High max 8.8USN-4618-1 1 CVE
tmux vulnerability
Sergey Nizovtsev discovered that tmux incorrectly handled some inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first Nov 5, 2020 -
Medium max 5.9USN-4613-1 1 CVE
python-cryptography vulnerability
Hubert Kario discovered that python-cryptography incorrectly handled certain decryption. An attacker could possibly use this issue to expose sensitive information.
first Nov 3, 2020 -
UnscoredUSN-4610-1 1 CVE
fastd vulnerability
It was discovered that fastd did not properly handle receive buffers under certain circumstances. A remote attacker could possibly use this issue to cause a memory leak, resulting in a denial of service. (CVE-2020-27638)
first Oct 29, 2020 -
UnscoredUSN-4608-1 0 CVEs
ca-certificates update
The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.44 version of the Mozilla certificate authority bundle.
first Oct 28, 2020 -
UnscoredUSN-4605-2 0 CVEs
blueman vulnerability
Vaisha Bernard discovered that blueman did not properly sanitize input on the d-bus interface to blueman-mechanism. A local attacker could possibly use this issue to escalate privileges and run arbitrary code or cause a denial of service. (CVE-2020-15238) Whi…
first Nov 3, 2020 -
High max 7.1USN-4605-1 1 CVE
blueman vulnerability
Vaisha Bernard discovered that blueman did not properly sanitize input on the d-bus interface to blueman-mechanism. A local attacker could possibly use this issue to escalate privileges and run arbitrary code or cause a denial of service. (CVE-2020-15238)
first Oct 27, 2020 -
High max 8.1USN-4597-1 3 CVEs
libapache2-mod-auth-mellon vulnerabilities
François Kooman discovered that mod_auth_mellon incorrectly handled cookies. An attacker could possibly use this issue to cause a Cross-Site Session Transfer attack. (CVE-2017-6807) It was discovered that mod_auth_mellon incorrectly handled certain requests. …
first Oct 22, 2020 -
High max 7.1USN-4595-1 1 CVE
grunt vulnerability
It was discovered that Grunt did not properly load yaml files. An attacker could possibly use this to execute arbitrary code. (CVE-2020-7729)
first Oct 20, 2020 -
UnscoredUSN-4590-1 1 CVE
collabtive vulnerability
It was discovered that Collabtive did not properly validate avatar image file uploads. An authenticated user could exploit this with a crafted file to cause Collabtive to execute arbitrary code. (CVE-2015-0258)
first Oct 19, 2020 -
Medium max 6.1USN-4589-2 1 CVE
docker.io vulnerability
USN-4589-1 fixed a vulnerability in containerd. This update provides the corresponding update for docker.io. Original advisory details: It was discovered that containerd could be made to expose sensitive information when processing URLs in container image man…
first Oct 15, 2020 -
Medium max 6.1USN-4589-1 1 CVE
containerd vulnerability
It was discovered that containerd could be made to expose sensitive information when processing URLs in container image manifests. A remote attacker could use this to trick the user and obtain the user's registry credentials.
first Oct 15, 2020 -
UnscoredUSN-4588-1 1 CVE
flightgear vulnerability
It was discovered that FlightGear could write arbitrary files if received a special nasal script. A remote attacker could exploit this with a crafted file to execute arbitrary code.
first Oct 19, 2020 -
UnscoredUSN-4585-1 2 CVEs
newsbeuter vulnerabilities
It was discovered that Newsbeuter didn't handle the command line input properly. An remote attacker could use it to ran remote code by crafting a special input file. (CVE-2017-12904) It was discovered that Newsbeuter didn't handle metacharacters in its filena…
first Oct 15, 2020 -
UnscoredUSN-4582-1 2 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-17087) It was discovered that Vim incorrectly han…
first Oct 14, 2020 -
UnscoredUSN-4563-2 1 CVE
ntp vulnerability
USN-4563-1 fixed a vulnerability in NTP. This update provides the corresponding update for Ubuntu 20.04 LTS and Ubuntu 20.10. Original advisory details: It was discovered that the fix for CVE-2018-7182 introduced a NULL pointer dereference into NTP. An attack…
first Apr 20, 2021 -
UnscoredUSN-4563-1 1 CVE
ntp vulnerability
It was discovered that the fix for CVE-2018-7182 introduced a NULL pointer dereference into NTP. An attacker could use this vulnerability to cause a denial of service (crash).
first Oct 1, 2020 -
High max 8.6USN-4561-2 2 CVEs
ruby-rack vulnerabilities
USN-4561-1 fixed vulnerabilities in Rack. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 20.04 LTS and Ubuntu 20.10. Original advisory details: It was discovered that Rack incorrectly handled certain paths. An attacker could possib…
first Apr 6, 2021 -
High max 8.6USN-4561-1 2 CVEs
ruby-rack vulnerabilities
It was discovered that Rack incorrectly handled certain paths. An attacker could possibly use this issue to obtain sensitive information. (CVE-2020-8161) It was discovered that Rack incorrectly validated cookies. An attacker could possibly use this issue to f…
first Sep 30, 2020 -
UnscoredUSN-4556-1 5 CVEs
netqmail vulnerabilities
It was discovered that netqmail did not properly handle certain input. Both remote and local attackers could use this vulnerability to cause netqmail to crash or execute arbitrary code. (CVE-2005-1513, CVE-2005-1514, CVE-2005-1515) It was discovered that netq…
first Sep 29, 2020 -
UnscoredUSN-4552-3 1 CVE
pam-python regression
USN-4552-1 and USN-4552-2 fixed a vulnerability in Pam-python. The update introduced a regression which prevented PAM modules written in Python from importing python modules from site-specific directories. We apologize for the inconvenience. Original advisory…
first Oct 28, 2020 -
UnscoredUSN-4552-2 1 CVE
pam-python vulnerability
Malte Kraus discovered that Pam-python mishandled certain environment variables. A local attacker could potentially use this vulnerability to execute programs as root.
first Oct 21, 2020 -
UnscoredUSN-4552-1 1 CVE
pam-python vulnerability
Malte Kraus discovered that Pam-python mishandled certain environment variables. A local attacker could potentially use this vulnerability to execute programs as root.
first Sep 28, 2020 -
Critical max 9.9USN-4551-1 4 CVEs
squid3 vulnerabilities
Alex Rousskov and Amit Klein discovered that Squid incorrectly handled certain Content-Length headers. A remote attacker could possibly use this issue to perform an HTTP request smuggling attack, resulting in cache poisoning. (CVE-2020-15049) Amit Klein disco…
first Sep 28, 2020 -
UnscoredUSN-4540-1 2 CVEs
atftp vulnerabilities
Denis Andzakovic discovered that atftpd incorrectly handled certain malformed packets. A remote attacker could send a specially crafted packet to cause atftpd to crash, resulting in a denial of service. (CVE-2019-11365) Denis Andzakovic discovered that atftpd…
first Sep 24, 2020 -
Medium max 4.0USN-4537-1 1 CVE
aptdaemon vulnerability
Vaisha Bernard discovered that Aptdaemon incorrectly handled the Locale property. A local attacker could use this issue to test for the presence of local files.
first Sep 24, 2020 -
UnscoredUSN-4533-1 0 CVEs
ldm vulnerabilities
Veeti Veteläinen discovered that the LTSP Display Manager (ldm) incorrectly handled user logins from unsupported shells. A local attacker could possibly use this issue to gain root privileges. (CVE-2019-20373)
first Sep 22, 2020 -
Medium max 6.5USN-4531-1 1 CVE
busybox vulnerability
It was discovered that the BusyBox wget applet incorrectly validated SSL certificates. A remote attacker could possibly use this issue to intercept secure communications.
first Sep 22, 2020 -
UnscoredUSN-4517-1 1 CVE
libemail-address-list-perl vulnerability
It was discovered that Email-Address-List does not properly parse email addresses during email-ingestion. A remote attacker could use this issue to cause an algorithmic complexity attack, resulting in a denial of service. (CVE-2018-18898)
first Sep 17, 2020 -
UnscoredUSN-4511-1 1 CVE
qemu vulnerability
Ziming Zhang, Xiao Wei, Gonglei Arei, and Yanyu Zhang discovered that QEMU incorrectly handled certain USB packets. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code …
first Sep 17, 2020 -
UnscoredUSN-4509-1 2 CVEs
libdbi-perl vulnerabilities
It was discovered that Perl DBI module incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2013-7490) It was discovered that Perl DBI module incorrectly handled certain files. An attacker could possibl…
first Sep 17, 2020 -
UnscoredUSN-4508-1 1 CVE
storebackup vulnerability
It was discovered that StoreBackup did not properly manage lock files. A local attacker could use this issue to cause a denial of service or escalate privileges and run arbitrary code. (CVE-2020-7040)
first Sep 16, 2020 -
UnscoredUSN-4506-1 1 CVE
mcabber vulnerability
It was discovered that MCabber does not properly manage roster pushes. An attacker could possibly use this issue to remotely perform machine-in-the-middle attacks. (CVE-2016-9928).
first Sep 16, 2020 -
High max 7.5USN-4505-1 1 CVE
libphp-phpmailer vulnerability
Elar Lang discovered that PHPMailer did not properly escape double quote characters in filenames. A remote attacker could possibly exploit this with a crafted filename to bypass attachment filters that are based on matching filename extensions. (CVE-2020-1362…
first Sep 16, 2020 -
High max 8.2USN-4502-1 1 CVE
ruby-websocket-extensions vulnerability
It was discovered that websocket-extensions does not properly parse special headers. A remote attacker could use this issue to cause regex backtracking, resulting in a denial of service. (CVE-2020-7663)
first Sep 16, 2020 -
UnscoredUSN-4500-1 1 CVE
bsdiff vulnerabilities
It was discovered that bsdiff mishandled certain input. If a user were tricked into opening a malicious file, an attacker could cause bsdiff to crash or potentially execute arbitrary code.
first Sep 15, 2020 -
Critical max 9.8USN-4496-1 1 CVE
Apache XML-RPC vulnerability
It was discovered that Apache XML-RPC (aka ws-xmlrpc) does not properly deserialize untrusted data. An attacker could possibly use this issue to execute arbitrary code. (CVE-2019-17570)
first Sep 15, 2020