8,466 results · Feed
-
UnscoredUSN-3745-1 1 CVE
wpa vulnerability
It was discovered that wpa_supplicant and hostapd incorrectly handled certain messages. An attacker could possibly use this to access sensitive information.
first Aug 20, 2018 -
UnscoredUSN-3735-1 1 CVE
openjdk-7 vulnerability
It was discovered that the PatternSyntaxException class in OpenJDK did not properly validate arguments passed to it. An attacker could use this to potentially construct a class that caused a denial of service (excessive memory consumption).
first Aug 10, 2018 -
UnscoredUSN-3734-1 1 CVE
openjdk-8 vulnerability
It was discovered that the PatternSyntaxException class in OpenJDK did not properly validate arguments passed to it. An attacker could use this to possibly construct a class that caused a denial of service (excessive memory consumption).
first Aug 10, 2018 -
Medium max 6.1USN-3733-1 1 CVE
gnupg vulnerability
Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal, and Yuval Yarom discovered that GnuPG is vulnerable to a cache side-channel attack. A local attacker could use this attack to …
first Aug 7, 2018 -
UnscoredUSN-3732-2 1 CVE
linux-hwe, linux-azure, linux-gcp vulnerability
USN-3732-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS. Juha-Matti Tilli discovered that the TCP imple…
first Aug 6, 2018 -
Medium max 5.3USN-3731-1 1 CVE
lftp vulnerability
It was discovered that LFTP incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service.
first Aug 6, 2018 -
Medium max 6.1USN-3726-1 1 CVE
python-django vulnerability
Andreas Hug discovered that Django contained an open redirect in CommonMiddleware. A remote attacker could possibly use this issue to perform phishing attacks.
first Aug 1, 2018 -
UnscoredUSN-3721-1 1 CVE
ant vulnerability
Danny Grander discovered that Apache Ant incorrectly handled certain compressed files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could use this issue to overwrite arbitrary files.
first Jul 24, 2018 -
High max 7.5USN-3720-1 1 CVE
python-cryptography vulnerability
It was discovered that python-cryptography incorrectly handled certain inputs. An attacker could possibly use this to get access to sensitive information.
first Jul 23, 2018 -
UnscoredUSN-3719-3 12 CVEs
mutt vulnerabilities
USN-3719-1 fixed vulnerabilities in Mutt. Unfortunately, the fixes were not correctly applied to the packaging for Mutt in Ubuntu 16.04 LTS. This update corrects the oversight. We apologize for the inconvenience. Original advisory details: It was discovered t…
first Sep 28, 2018 -
UnscoredUSN-3719-1 12 CVEs
mutt vulnerabilities
It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this to execute arbitrary code. (CVE-2018-14350, CVE-2018-14352, CVE-2018-14354, CVE-2018-14359, CVE-2018-14358, CVE-2018-14353 ,CVE-2018-14357) It was discovered…
first Jul 23, 2018 -
UnscoredUSN-3718-2 0 CVEs
linux-hwe, linux-azure, linux-gcp regression
USN-3695-2 fixed vulnerabilities in the Linux Hardware Enablement Kernel (HWE) kernel for Ubuntu 16.04 LTS. Unfortunately, the fix for CVE-2018-1108 introduced a regression where insufficient early entropy prevented services from starting, leading in some sit…
first Jul 21, 2018 -
UnscoredUSN-3716-1 0 CVEs
dnsmasq update
This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover.
first Jul 12, 2018 -
UnscoredUSN-3715-1 0 CVEs
dns-root-data update
This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover and refreshes the list of root hints.
first Jul 12, 2018 -
UnscoredUSN-3707-1 4 CVEs
ntp vulnerabilities
Yihan Lian discovered that NTP incorrectly handled certain malformed mode 6 packets. A remote attacker could possibly use this issue to cause ntpd to crash, resulting in a denial of service. This issue only affected Ubuntu 17.10 and Ubuntu 18.04 LTS. (CVE-201…
first Jul 9, 2018 -
UnscoredUSN-3704-1 1 CVE
devscripts vulnerability
It was discovered that devscripts incorrectly handled certain YAML files. An attacker could possibly use this to execute arbitrary code.
first Jul 5, 2018 -
Medium max 5.4USN-3703-1 1 CVE
libarchive-zip-perl vulnerability
It was discovered that the Archive Zip module incorrectly handled certain inputs. An attacker could possibly use this to access sensitive information.
first Jul 4, 2018 -
Medium max 5.5USN-3697-2 7 CVEs
linux-oem vulnerabilities
It was discovered that a null pointer dereference vulnerability existed in the DCCP protocol implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2018-1130) Jann Horn discovered that the 32 bit …
first Jul 2, 2018 -
UnscoredUSN-3696-2 10 CVEs
linux-lts-xenial, linux-aws vulnerabilities
USN-3696-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that an integer overflow exi…
first Jul 2, 2018 -
UnscoredUSN-3695-2 5 CVEs
linux-hwe, linux-azure vulnerabilities
USN-3695-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS. Wen Xu discovered that the ext4 file system im…
first Jul 2, 2018 -
UnscoredUSN-3694-1 15 CVEs
nasm vulnerabilities
It was discovered that NASM incorrectly handled certain source files. If a user or automated system were tricked into processing a specially crafted source file, a remote attacker could use these issues to cause NASM to crash, resulting in a denial of service…
first Jun 28, 2018 -
Medium max 5.3USN-3691-1 10 CVEs
openjdk-7 vulnerabilities
It was discovered that the Security component of OpenJDK did not correctly perform merging of multiple sections for the same file listed in JAR archive file manifests. An attacker could possibly use this to modify attributes in a manifest without invalidating…
first Jun 21, 2018 -
UnscoredUSN-3690-2 0 CVEs
amd64-microcode regression
USN-3690-1 provided updated microcode for AMD processors to address CVE-2017-5715 (aka Spectre). Unfortunately, the update caused some systems to fail to boot. This update reverts the update for Ubuntu 14.04 LTS. We apologize for the inconvenience. Original a…
first Jul 5, 2018 -
Medium max 5.6USN-3690-1 1 CVE
amd64-microcode update
Jann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, includ…
first Jun 20, 2018 -
UnscoredUSN-3678-4 3 CVEs
linux-raspi2 vulnerabilities
Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly handle corrupted meta data in some situations. An attacker could use this to specially craft an ext4 file system that caused a denial of service (system crash) when…
first Jun 15, 2018 -
UnscoredUSN-3678-3 3 CVEs
linux-azure vulnerabilities
Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly handle corrupted meta data in some situations. An attacker could use this to specially craft an ext4 file system that caused a denial of service (system crash) when…
first Jun 12, 2018 -
UnscoredUSN-3678-2 3 CVEs
linux-azure vulnerabilities
Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly handle corrupted meta data in some situations. An attacker could use this to specially craft an ext4 file system that caused a denial of service (system crash) when…
first Jun 12, 2018 -
UnscoredUSN-3677-2 5 CVEs
linux-hwe, linux-gcp, linux-oem vulnerabilities
USN-3677-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS. It was discovered that the netfilter subsystem of the …
first Jun 12, 2018 -
UnscoredUSN-3676-2 4 CVEs
linux-lts-xenial, linux-aws vulnerabilities
USN-3676-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Wen Xu discovered that the ext4 filesystem imp…
first Jun 11, 2018 -
UnscoredUSN-3671-1 2 CVEs
git vulnerabilities
Etienne Stalmans discovered that git did not properly validate git submodules files. A remote attacker could possibly use this to craft a git repo that causes arbitrary code execution when "git clone --recurse-submodules" is used. (CVE-2018-11235) It was disc…
first Jun 5, 2018 -
Medium max 5.9USN-3666-1 1 CVE
python-oslo.middleware vulnerability
Divya K Konoor discovered Oslo middleware was vulnerable to an information disclosure. A local attacker could exploit this flaw to obtain sensitive information from OpenStack component error logs.
first May 31, 2018 -
UnscoredUSN-3664-2 1 CVE
apport vulnerability
USN-3664-1 fixed a vulnerability in Apport. Sander Bos reported that Ubuntu 14.04 LTS was also vulnerable to this issue, but was incorrectly omitted from the previous updates. This update provides the corresponding update for Ubuntu 14.04 LTS. Original adviso…
first Jun 4, 2018 -
UnscoredUSN-3664-1 1 CVE
apport vulnerability
Sander Bos discovered that Apport incorrectly handled core dumps when certain files are missing from /proc. A local attacker could possibly use this issue to cause a denial of service, gain root privileges, or escape from containers.
first May 30, 2018 -
UnscoredUSN-3663-1 1 CVE
haproxy vulnerability
It was discovered that HAProxy incorrectly handled certain resquests. An attacker could possibly use this to expose sensitive information.
first May 30, 2018 -
Medium max 5.5USN-3656-1 12 CVEs
linux-raspi2, linux-snapdragon vulnerabilities
Tuba Yavuz discovered that a double-free error existed in the USBTV007 driver of the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-17975) It was discovered that a race c…
first May 22, 2018 -
UnscoredUSN-3650-1 1 CVE
xdg-utils vulnerability
It was discovered that xdg-utils incorrectly handled certain inputs. An attacker could possibly use this to execute arbitrary code.
first May 21, 2018 -
UnscoredUSN-3649-1 3 CVEs
qemu vulnerabilities
Cyrille Chatras discovered that QEMU incorrectly handled certain PS2 values during migration. An attacker could possibly use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubun…
first May 16, 2018 -
Medium max 5.3USN-3644-1 11 CVEs
openjdk-8 vulnerabilities
It was discovered that the Security component of OpenJDK did not correctly perform merging of multiple sections for the same file listed in JAR archive file manifests. An attacker could possibly use this to modify attributes in a manifest without invalidating…
first May 11, 2018 -
UnscoredUSN-3643-1 1 CVE
wget vulnerability
It was discovered that Wget incorrectly handled certain inputs. An attacker could possibly use this to inject arbitrary cookie values.
first May 9, 2018 -
UnscoredUSN-3633-1 1 CVE
linux-euclid vulnerability
Jann Horn discovered that the Berkeley Packet Filter (BPF) implementation in the Linux kernel improperly performed sign extension in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary cod…
first Apr 24, 2018