8,435 results · Feed
-
High max 7.8USN-6586-1 5 CVEs
freeimage vulnerabilities
It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked into opening a crafted TIFF file, a remote attacker could use this issue to cause a heap buffer overflow, resulting in a denial of service attack. This issu…
first Jan 16, 2024 -
Medium max 5.5USN-6580-1 1 CVE
w3m vulnerability
It was discovered that w3m incorrectly handled certain HTML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first Jan 15, 2024 -
UnscoredUSN-6571-1 1 CVE
monit vulnerability
Youssef Rebahi-Gilbert discovered that Monit did not properly process credentials for disabled accounts. An attacker could possibly use this issue to login to the platform with an expired account and a valid password.
first Jan 9, 2024 -
UnscoredUSN-6558-1 4 CVEs
audiofile vulnerabilities
It was discovered that audiofile could be made to dereference invalid memory. If a user or an automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected…
first Dec 14, 2023 -
Medium max 5.5USN-6544-1 5 CVEs
binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled certain COFF files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2022-38533) It was discovered that GNU binutils w…
first Dec 11, 2023 -
High max 7.0USN-6531-1 6 CVEs
redis vulnerabilities
Seiya Nakata and Yudai Fujiwara discovered that Redis incorrectly handled certain specially crafted Lua scripts. An attacker could possibly use this issue to cause heap corruption and execute arbitrary code. (CVE-2022-24834) SeungHyun Lee discovered that Redi…
first Dec 5, 2023 -
UnscoredUSN-6513-1 2 CVEs
python2.7, python3.5, python3.6 vulnerabilities
It was discovered that Python incorrectly handled certain plist files. If a user or an automated system were tricked into processing a specially crafted plist file, an attacker could possibly use this issue to consume resources, resulting in a denial of servi…
first Nov 23, 2023 -
Medium max 5.5USN-6512-1 2 CVEs
tiff vulnerabilities
It was discovered that LibTIFF could be made to run into an infinite loop. If a user or an automated system were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service. (CVE-2022-40090) It w…
first Nov 23, 2023 -
Medium max 6.2USN-6487-1 5 CVEs
avahi vulnerabilities
Evgeny Vereshchagin discovered that Avahi contained several reachable assertions, which could lead to intentional assertion failures when specially crafted user input was given. An attacker could possibly use this issue to cause a denial of service. (CVE-2023…
first Nov 20, 2023 -
Medium max 5.5USN-6478-1 1 CVE
traceroute vulnerability
It was discovered that Traceroute did not properly parse command line arguments. An attacker could possibly use this issue to execute arbitrary commands.
first Nov 14, 2023 -
Critical max 9.1USN-6474-1 13 CVEs
xrdp vulnerabilities
It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to out-of-bounds reads. An attacker could possibly use this issue to crash the program or extract sensitive information. (CVE-2022-23479, CVE-2022-23481, CVE-…
first Nov 8, 2023 -
UnscoredUSN-6471-1 1 CVE
libsndfile vulnerability
It was discovered that libsndfile contained multiple arithmetic overflows. If a user or automated system were tricked into processing a specially crafted audio file, an attacker could possibly use this issue to cause a denial of service.
first Nov 2, 2023 -
High max 7.5USN-6469-1 1 CVE
xrdp vulnerability
Ashley Newson discovered that xrdp incorrectly handled memory when processing certain incoming connections. An attacker could possibly use this issue to cause a denial of service or arbitrary code execution.
first Nov 2, 2023 -
UnscoredUSN-6467-1 1 CVE
krb5 vulnerability
Robert Morris discovered that Kerberos did not properly handle memory access when processing RPC data through kadmind, which could lead to the freeing of uninitialized memory. An authenticated remote attacker could possibly use this issue to cause kadmind to …
first Nov 1, 2023 -
High max 8.1USN-6455-1 2 CVEs
exim4 vulnerabilities
It was discovered that Exim incorrectly handled validation of user-supplied data, which could lead to memory corruption. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2023-42117) It was discovered that Exim incorrectly handle…
first Oct 26, 2023 -
UnscoredUSN-6451-1 1 CVE
ncurses vulnerability
It was discovered that ncurses could be made to read out of bounds. An attacker could possibly use this issue to cause a denial of service.
first Oct 24, 2023 -
High max 7.5USN-6421-1 1 CVE
bind9 vulnerability
It was discovered that Bind incorrectly handled certain control channel messages. A remote attacker with access to the control channel could possibly use this issue to cause Bind to crash, resulting in a denial of service.
first Oct 9, 2023 -
High max 7.8USN-6420-1 13 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 L…
first Oct 9, 2023 -
Medium max 6.5USN-6419-1 5 CVEs
jqueryui vulnerabilities
Hong Phat Ly discovered that jQuery UI did not properly manage parameters from untrusted sources, which could lead to arbitrary web script or HTML code injection. A remote attacker could possibly use this issue to perform a cross-site scripting (XSS) attack. …
first Oct 5, 2023 -
Critical max 9.8USN-6411-1 3 CVEs
exim4 vulnerabilities
It was discovered that Exim incorrectly handled certain challenge requests. A remote attacker could possibly use this issue to perform out-of-bounds reads, resulting in information leakage. (CVE-2023-42114) It was discovered that Exim incorrectly handled vali…
first Oct 4, 2023 -
High max 7.8USN-6408-2 4 CVEs
libxpm vulnerabilities
USN-6408-1 fixed several vulnerabilities in libXpm. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Yair Mizrahi discovered that libXpm incorrectly handled certain malformed…
first Oct 23, 2023 -
UnscoredUSN-6393-1 1 CVE
imagemagick vulnerability
It was discovered that ImageMagick did not properly handle memory when processing the -help option. An attacker could potentially use this issue to cause a crash.
first Sep 21, 2023 -
High max 7.8USN-6407-2 3 CVEs
libx11 vulnerabilities
USN-6407-1 fixed several vulnerabilities in libx11. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Gregory James Duck discovered that libx11 incorrectly handled certain key…
first Oct 10, 2023 -
UnscoredUSN-6394-2 1 CVE
python2.7 vulnerability
USN-6394-1 fixed a vulnerability in Python. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that Python incorrectly handled certain scripts. An attacker co…
first Oct 17, 2023 -
UnscoredUSN-6381-1 8 CVEs
binutils vulnerabilities
It was discovered that a memory leak existed in certain GNU binutils modules. An attacker could possibly use this issue to cause a denial of service (memory exhaustion). (CVE-2020-19724, CVE-2020-21490) It was discovered that GNU binutils was not properly per…
first Sep 18, 2023 -
Medium max 4.4USN-6373-1 1 CVE
gawk vulnerability
It was discovered that gawk could be made to read out of bounds when processing certain inputs. If a user or an automated system were tricked into opening a specially crafted input, an attacker could possibly use this issue to cause a denial of service.
first Sep 14, 2023 -
UnscoredUSN-6360-2 1 CVE
flac vulnerability
USN-6360-1 fixed a vulnerability in FLAC. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: It was discovered that FLAC incorrectly handled encoding certain files. A remote a…
first Sep 22, 2023 -
UnscoredUSN-6354-1 1 CVE
python2.7, python3.5 vulnerability
It was discovered that Python did not properly handle XML entity declarations in plist files. An attacker could possibly use this vulnerability to perform an XML External Entity (XXE) injection, resulting in a denial of service or information disclosure.
first Sep 7, 2023 -
Medium max 6.2USN-6345-1 1 CVE
sox vulnerability
It was discovered that SoX incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, an attacker could possibly use this issue to cause a denial of service.
first Sep 6, 2023 -
UnscoredUSN-6371-1 1 CVE
libssh2 vulnerability
It was discovered that libssh2 incorrectly handled memory access. An attacker could possibly use this issue to cause a crash.
first Sep 14, 2023 -
High max 7.5USN-6370-1 3 CVEs
modsecurity-apache vulnerabilities
It was discovered that ModSecurity incorrectly handled certain nested JSON objects. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-42717) It w…
first Sep 14, 2023 -
High max 7.5USN-6335-1 2 CVEs
busybox vulnerabilities
It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated system were tricked into processing a specially crafted gzip archive, a remote attacker could use this issue to cause BusyBox to crash, resulting in a d…
first Sep 4, 2023 -
Critical max 9.8USN-6326-1 1 CVE
python-git vulnerability
It was discovered that GitPython did not block insecure options from user inputs in the clone command. An attacker could possibly use this issue to execute arbitrary commands on the host.
first Aug 31, 2023 -
UnscoredUSN-6322-1 10 CVEs
elfutils vulnerabilities
It was discovered that elfutils incorrectly handled certain malformed files. If a user or automated system were tricked into processing a specially crafted file, elfutils could be made to crash or consume resources, resulting in a denial of service. This issu…
first Aug 30, 2023 -
UnscoredUSN-6313-1 8 CVEs
faad2 vulnerabilities
It was discovered that FAAD2 incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2021-32272, CVE-2021-32…
first Aug 29, 2023 -
High max 7.8USN-6302-1 15 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 L…
first Aug 21, 2023 -
Medium max 6.5USN-6290-1 10 CVEs
tiff vulnerabilities
It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image files with the tiffcrop utility. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause…
first Aug 15, 2023 -
High max 7.8USN-6452-1 10 CVEs
vim vulnerabilities
It was discovered that Vim could be made to divide by zero. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 23.04. (CVE-2023-3896) It was discovered that Vim did not properly manage memory. An attacker c…
first Oct 25, 2023 -
High max 7.5USN-6303-2 1 CVE
clamav vulnerability
USN-6303-1 fixed a vulnerability in ClamAV. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: It was discovered that ClamAV incorrectly handled parsing HFS+ files. A remote a…
first Aug 21, 2023 -
UnscoredUSN-6279-1 0 CVEs
openssh update
It was discovered that OpenSSH has an observable discrepancy leading to an information leak in the algorithm negotiation. This update mitigates the issue by tweaking the client hostkey preference ordering algorithm to prefer the default ordering if the user h…
first Aug 9, 2023