8,466 results · Feed
-
UnscoredUSN-4182-3 0 CVEs
intel-microcode regression
USN-4182-1 provided updated Intel Processor Microcode. A regression was discovered that caused some Skylake processors to hang after a warm reboot. This update reverts the microcode for that specific processor family. We apologize for the inconvenience. Origi…
first Dec 4, 2019 -
Critical max 9.8USN-4175-1 1 CVE
ruby-nokogiri vulnerability
It was discovered that Nokogiri incorrectly handled inputs. A remote attacker could possibly use this issue to execute arbitrary OS commands.
first Nov 5, 2019 -
UnscoredUSN-4174-1 1 CVE
haproxy vulnerability
It was discovered that HAproxy incorrectly handled certain HTTP requests. An attacker could possibly use this issue to a privilege escalation (Request Smuggling).
first Nov 5, 2019 -
UnscoredUSN-4171-6 0 CVEs
apport regression
USN-4171-1 fixed vulnerabilities in Apport. The update caused a regression when handling configuration files. This update fixes the problem, and also introduces further hardening measures. Original advisory details: Kevin Backhouse discovered Apport would rea…
first Nov 12, 2020 -
UnscoredUSN-4171-5 0 CVEs
apport regression
USN-4171-1 fixed vulnerabilities in Apport. This caused a regression in autopkgtest and python2 compatibility. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kevin Backhouse discovered Apport would read its user-…
first Mar 18, 2020 -
UnscoredUSN-4171-4 0 CVEs
apport regression
USN-4171-1 fixed a vulnerability in Apport. The update caused a regression in the Python Apport library. This update fixes the problem for Ubuntu 14.04 ESM. We apologize for the inconvenience. Original advisory details: Kevin Backhouse discovered Apport would…
first Nov 5, 2019 -
UnscoredUSN-4171-3 0 CVEs
apport regression
USN-4171-1 fixed vulnerabilities in Apport. The update caused a regression in the Python Apport library. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kevin Backhouse discovered Apport would read its user-contro…
first Nov 5, 2019 -
High max 7.0USN-4171-2 5 CVEs
apport vulnerabilities
USN-4171-1 fixed several vulnerabilities in apport. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Kevin Backhouse discovered Apport would read its user-controlled settings file as the root user. This could be u…
first Nov 4, 2019 -
High max 7.0USN-4171-1 5 CVEs
apport vulnerabilities
Kevin Backhouse discovered Apport would read its user-controlled settings file as the root user. This could be used by a local attacker to possibly crash Apport or have other unspecified consequences. (CVE-2019-11481) Sander Bos discovered a race-condition in…
first Oct 30, 2019 -
UnscoredUSN-4139-1 1 CVE
file-roller vulnerability
It was discovered that File Roller incorrectly handled certain TAR files. An attacker could possibly use this issue to overwrite sensitive files during extraction.
first Sep 25, 2019 -
UnscoredUSN-4136-2 1 CVE
wpa, wpasupplicant vulnerability
USN-4136-1 fixed a vulnerability in wpa_supplicant. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that wpa_supplicant incorrectly handled certain management frames. An att…
first Sep 18, 2019 -
UnscoredUSN-4136-1 1 CVE
wpa vulnerability
It was discovered that wpa_supplicant incorrectly handled certain management frames. An attacker could possibly use this issue to cause a denial of service.
first Sep 18, 2019 -
High max 7.5USN-4128-2 2 CVEs
tomcat9 vulnerabilities
It was discovered that the Tomcat 9 SSI printenv command echoed user provided data without escaping it. An attacker could possibly use this issue to perform an XSS attack. (CVE-2019-0221) It was discovered that Tomcat 9 did not address HTTP/2 connection windo…
first Sep 18, 2019 -
High max 7.5USN-4128-1 2 CVEs
tomcat8 vulnerabilities
It was discovered that the Tomcat 8 SSI printenv command echoed user provided data without escaping it. An attacker could possibly use this issue to perform an XSS attack. (CVE-2019-0221) It was discovered that Tomcat 8 did not address HTTP/2 connection windo…
first Sep 10, 2019 -
UnscoredUSN-4125-1 1 CVE
memcached vulnerability
It was discovered that Memcached incorrectly handled certain UNIX sockets. An attacker could possibly use this issue to access sensitive information.
first Sep 9, 2019 -
High max 7.5USN-4123-1 1 CVE
npm/fstream vulnerability
It was discovered that npm/fstream incorrectly handled certain crafted tarballs. An attacker could use this vulnerability to write aritrary files to the filesystem.
first Sep 5, 2019 -
High max 7.5USN-4106-1 1 CVE
NLTK vulnerability
Mike Salvatore discovered that NLTK mishandled crafted ZIP archives during extraction. A remote attacker could use this vulnerability to write arbitrary files to the filesystem
first Aug 20, 2019 -
Medium max 6.5USN-4104-1 1 CVE
nova vulnerability
Donny Davis discovered that the Nova Compute service could return configuration or other information in response to a failed API request in some situations. A remote attacker could use this to expose sensitive information.
first Aug 19, 2019 -
UnscoredUSN-4103-2 1 CVE
Docker vulnerability
Jasiel Spelman discovered that a double free existed in the docker-credential- helpers dependency of Docker. A local attacker could use this to cause a denial of service (crash) or possibly execute arbitrary code. Original advisory details: Jasiel Spelman dis…
first Aug 19, 2019 -
High max 7.5USN-4099-1 3 CVEs
nginx vulnerabilities
Jonathan Looney discovered that nginx incorrectly handled the HTTP/2 implementation. A remote attacker could possibly use this issue to consume resources, leading to a denial of service.
first Aug 15, 2019 -
UnscoredUSN-4098-1 1 CVE
wpa vulnerability
It was discovered that wpa_supplicant and hostapd were vulnerable to a side channel attack against EAP-pwd. A remote attacker could possibly use this issue to recover certain passwords.
first Aug 14, 2019 -
Medium max 6.1USN-4089-1 1 CVE
ruby-rack vulnerability
It was discovered that Rack incorrectly handled carefully crafted requests. A remote attacker could use this issue to execute a cross-site scripting (XSS) attack.
first Aug 7, 2019 -
UnscoredUSN-4085-1 1 CVE
Sigil vulnerability
Mike Salvatore discovered that Sigil mishandled certain malformed EPUB files. An attacker could use this vulnerability to write arbitrary files to the filesystem.
first Aug 1, 2019 -
UnscoredUSN-4071-2 2 CVEs
patch vulnerabilities
USN-4071-1 fixed several vulnerabilities in Patch. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that Patch incorrectly handled certain files. An attacker could possibly use this issue to acce…
first Jul 24, 2019 -
UnscoredUSN-4071-1 2 CVEs
patch vulnerabilities
It was discovered that Patch incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information. (CVE-2019-13636) It was discovered that Patch incorrectly handled certain files. An attacker could possibly use this iss…
first Jul 24, 2019 -
UnscoredUSN-4065-1 2 CVEs
squid, squid3 vulnerabilities
It was discovered that Squid incorrectly handled Digest authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service. (CVE-2019-12525) It was discovered that Squid incorrectly handled Basic authenti…
first Jul 18, 2019 -
High max 7.2USN-4061-1 1 CVE
redis vulnerabilities
It was discovered that Redis incorrectly handled the hyperloglog data structure. An attacker could use this issue to cause Redis to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jul 16, 2019 -
UnscoredUSN-4059-1 2 CVEs
squid, squid3 vulnerabilities
It was discovered that Squid incorrectly handled certain SNMP packets. A remote attacker could possibly use this issue to cause memory consumption, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-19132…
first Jul 15, 2019 -
UnscoredUSN-4058-2 1 CVE
bash vulnerability
USN-4058-1 fixed a vulnerability in bash. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use …
first Aug 5, 2019 -
UnscoredUSN-4058-1 1 CVE
bash vulnerability
It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use this issue to escape restrictions and execute any command.
first Jul 15, 2019 -
UnscoredUSN-4053-1 4 CVEs
gvfs vulnerabilities
It was discovered that GVfs incorrectly handled the admin backend. Files created or moved by the admin backend could end up with the wrong ownership information, contrary to expectations. This issue only affected Ubuntu 18.04 LTS, Ubuntu 18.10, and Ubuntu 19.…
first Jul 9, 2019 -
Medium max 6.5USN-4051-2 1 CVE
apport vulnerability
USN-4051-1 fixed a vulnerability in apport. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Kevin Backhouse discovered a race-condition when reading the user's local Apport configuration. This could be used by a …
first Jul 9, 2019 -
Medium max 6.5USN-4051-1 1 CVE
apport vulnerability
Kevin Backhouse discovered a race-condition when reading the user's local Apport configuration. This could be used by a local attacker to cause Apport to include arbitrary files in a resulting crash report.
first Jul 9, 2019 -
UnscoredUSN-4048-1 2 CVEs
Docker vulnerabilities
Aleksa Sarai discovered that Docker was vulnerable to a directory traversal attack. An attacker could use this vulnerability to read and write arbitrary files on the host filesystem as root.
first Jul 8, 2019 -
Medium max 5.3USN-4041-2 1 CVE
linux-lts-xenial, linux-aws, linux-azure update
USN-4041-1 provided updates for the Linux kernel in Ubuntu. This update provides the corresponding updates for the Linux kernel for Ubuntu 16.04 ESM. USN-4017-2 fixed vulnerabilities in the Linux kernel. Unfortunately, the update introduced a regression that …
first Jun 29, 2019 -
UnscoredUSN-4037-1 0 CVEs
policykit-desktop-privileges update
The policykit-desktop-privileges Startup Disk Creator policy allowed administrative users to overwrite disks. As a security improvement, this operation now requires authentication.
first Jun 25, 2019 -
Medium max 6.5USN-4036-1 1 CVE
neutron vulnerability
Erik Olof Gunnar Andersson discovered that OpenStack Neutron incorrectly handled certain security group rules in the iptables firewall module. An authenticated attacker could possibly use this issue to block further application of security group rules for oth…
first Jun 25, 2019 -
UnscoredUSN-4031-1 1 CVE
linux, linux-hwe vulnerability
It was discovered that the Linux kernel did not properly separate certain memory mappings when creating new userspace processes on 64-bit Power (ppc64el) systems. A local attacker could use this to access memory contents or cause memory corruption of other pr…
first Jun 24, 2019 -
Critical max 9.8USN-4030-1 5 CVEs
web2py vulnerabilities
It was discovered that web2py does not properly check denied hosts before verifying passwords. An attacker could possibly use this issue to perform brute-force attacks. (CVE-2016-10321) It was discovered that web2py allows remote attackers to obtain environme…
first Jun 21, 2019 -
High max 7.5USN-4022-1 1 CVE
Gunicorn vulnerability
It was discovered that gunicorn improperly handled certain input. An attacker could potentially use this issue execute a cross-site scripting (XSS) attack.
first Jun 19, 2019