8,435 results · Feed
-
UnscoredUSN-6276-1 1 CVE
unixodbc vulnerability
It was discovered that unixODBC incorrectly handled certain unicode to ansi copies. An attacker could possibly use this issue to cause a denial of service.
first Aug 7, 2023 -
High max 8.0USN-6270-1 11 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 L…
first Aug 3, 2023 -
UnscoredUSN-6262-1 5 CVEs
wireshark vulnerabilities
It was discovered that Wireshark did not properly handle certain NFS packages when certain configuration options were enabled. An attacker could possibly use this issue to cause Wireshark to crash, resulting in a denial of service. (CVE-2020-13164) It was dis…
first Jul 31, 2023 -
High max 7.5USN-6243-1 4 CVEs
graphite-web vulnerabilities
It was discovered that Graphite-Web incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to perform server-side request forgery and obtai…
first Jul 25, 2023 -
High max 7.8USN-6453-2 2 CVEs
xorg-server vulnerabilities
USN-6453-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled pre…
first Oct 31, 2023 -
UnscoredUSN-6429-2 1 CVE
curl vulnerability
USN-6429-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that curl incorrectly handled cookies when an application duplica…
first Oct 11, 2023 -
UnscoredUSN-6428-1 1 CVE
tiff vulnerability
It was discovered that LibTIFF could be made to read out of bounds when processing certain malformed image files with the tiffcrop utility. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause …
first Oct 11, 2023 -
Critical max 9.8USN-6242-2 1 CVE
openssh vulnerability
USN-6242-1 fixed a vulnerability in OpenSSH. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: It was discovered that OpenSSH incorrectly handled loading certain PKCS#11 prov…
first Jul 31, 2023 -
Medium max 5.9USN-6237-3 2 CVEs
curl vulnerabilities
USN-6237-1 fixed several vulnerabilities in curl. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: Hiroki Kurosawa discovered that curl incorrectly handled validating certa…
first Sep 11, 2023 -
High max 7.5USN-6233-1 3 CVEs
yajl vulnerabilities
It was discovered that YAJL was not properly performing bounds checks when decoding a string with escape sequences. If a user or automated system using YAJL were tricked into processing specially crafted input, an attacker could possibly use this issue to cau…
first Jul 18, 2023 -
UnscoredUSN-6232-1 1 CVE
wkhtmltopdf vulnerability
It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or automated system using wkhtmltopdf were tricked into processing a specially crafted HTML file, an attacker could possibly use…
first Jul 20, 2023 -
Medium max 5.9USN-6229-1 4 CVEs
tiff vulnerabilities
It was discovered that LibTIFF was not properly handling variables used to perform memory management operations when processing an image through tiffcrop, which could lead to a heap buffer overflow. An attacker could possibly use this issue to cause a denial …
first Jul 13, 2023 -
Critical max 10.0USN-6209-1 6 CVEs
Gerbv vulnerabilities
Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber files. An attacker could possibly use this issue to crash Gerbv (resulting in a denial of service), or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS…
first Jul 7, 2023 -
High max 7.5USN-6197-1 1 CVE
openldap vulnerability
It was discovered that OpenLDAP was not properly performing bounds checks when executing functions related to LDAP URLs. An attacker could possibly use this issue to cause a denial of service.
first Jul 3, 2023 -
UnscoredUSN-6211-1 0 CVEs
linux-azure regression
USN-6130-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a spurious warning in the IPv6 subsystem. This update removes the undesired warning message.
first Jul 7, 2023 -
Medium max 6.5USN-6198-1 1 CVE
screen vulnerability
It was discovered that GNU Screen was not properly checking user identifiers before sending certain signals to target processes. If GNU Screen was installed as setuid or setgid, a local attacker could possibly use this issue to cause a denial of service on a …
first Jul 3, 2023 -
High max 8.1USN-6190-2 1 CVE
accountsservice vulnerability
USN-6190-1 fixed a vulnerability in AccountsService. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Kevin Backhouse discovered that AccountsService incorrectly handled cert…
first Sep 25, 2023 -
Medium max 6.5USN-6188-1 1 CVE
openssl vulnerability
Matt Caswell discovered that OpenSSL incorrectly handled certain ASN.1 object identifiers. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service.
first Jun 22, 2023 -
High max 7.5USN-6183-2 1 CVE
bind9 vulnerability
USN-6183-1 fixed vulnerabilities in Bind. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Shoham Danino, Anat Bremler-Barr, Yehuda Afek, and Yuval Shavitt discovered that B…
first Jul 18, 2023 -
Low max 3.8USN-6169-1 1 CVE
gsasl vulnerability
It was discovered that GNU SASL's GSSAPI server could make an out-of-bounds reads if given specially crafted GSS-API authentication data. A remote attacker could possibly use this issue to cause a denial of service or to expose sensitive information.
first Jun 15, 2023 -
UnscoredUSN-6168-2 1 CVE
libx11 vulnerability
USN-6168-1 fixed a vulnerability in libx11. This update provides the corresponding update for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. Original advisory details: Gregory James Duck discovered that libx11 incorrectly handled certain Request, E…
first Jun 20, 2023 -
Medium max 6.5USN-6167-1 4 CVEs
qemu vulnerabilities
It was discovered that QEMU did not properly manage the guest drivers when shared buffers are not allocated. A malicious guest driver could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue…
first Jun 19, 2023 -
Critical max 9.8USN-6146-1 9 CVEs
netatalk vulnerabilities
It was discovered that Netatalk did not properly validate the length of user-supplied data in the DSI structures. A remote attacker could possibly use this issue to execute arbitrary code with the privileges of the user invoking the programs. This issue only …
first Jun 8, 2023 -
High max 7.8USN-6047-1 1 CVE
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.4, linux-gcp, linux-gcp-4.15, linux-gcp-5.4, linux-gke, linux-gkeop, linux-hwe, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oracle, linux-oracle-5.4 vulnerability
It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix …
first Apr 27, 2023 -
High max 7.8USN-6166-2 1 CVE
libcap2 vulnerability
USN-6166-1 fixed a vulnerability in libcap2. This update provides the corresponding update for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. Original advisory details: Richard Weinberger discovered that libcap2 incorrectly handled certain long inpu…
first Jun 19, 2023 -
Medium max 5.5USN-6165-2 5 CVEs
glib2.0 vulnerabilities
USN-6165-1 fixed vulnerabilities in GLib. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that GLib incorrectly handled non-normal GVariants. An attacker …
first Oct 19, 2023 -
UnscoredUSN-6163-1 2 CVEs
pano13 vulnerabilities
It was discovered that pano13 did not properly validate the prefix provided for PTcrop's output. An attacker could use this issue to cause pano13 to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 1…
first Jun 14, 2023 -
High max 7.8USN-6145-1 2 CVEs
sysstat vulnerabilities
It was discovered that Sysstat incorrectly handled certain arithmetic multiplications. An attacker could use this issue to cause Sysstat to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue was only fixed for Ubuntu 16.04…
first Jun 7, 2023 -
High max 7.5USN-6139-1 1 CVE
python2.7, python3.10, python3.11, python3.5, python3.6, python3.8 vulnerability
Yebo Cao discovered that Python incorrectly handled certain URLs. An attacker could use this issue to bypass blockinglisting methods. This issue was first addressed in USN-5960-1, but was incomplete. Here we address an additional fix to that issue. (CVE-2023-…
first Jun 5, 2023 -
High max 7.8USN-6108-1 2 CVEs
Jhead vulnerabilities
It was discovered that Jhead did not properly handle certain crafted images while rotating them. An attacker could possibly use this issue to crash Jhead, resulting in a denial of service. (CVE-2021-34055) Kyle Brown discovered that Jhead did not properly han…
first May 25, 2023 -
UnscoredUSN-6105-2 0 CVEs
ca-certificates update
USN-6105-1 updated ca-certificates. This provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to…
first May 24, 2023 -
Medium max 6.5USN-6101-1 4 CVEs
binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled certain DWARF files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 22.10. (CVE-2023-1579) It was discovered that GNU binutils did n…
first May 24, 2023 -
High max 7.5USN-6100-1 1 CVE
libhtml-stripscripts-perl vulnerability
It was discovered that HTML::StripScripts does not properly parse HTML content with certain style attributes. A remote attacker could use this issue to cause a regular expression denial of service (ReDoS).
first May 23, 2023 -
High max 7.1USN-6099-1 5 CVEs
ncurses vulnerabilities
It was discovered that ncurses was incorrectly performing bounds checks when processing invalid hashcodes. An attacker could possibly use this issue to cause a denial of service or to expose sensitive information. This issue only affected Ubuntu 18.04 LTS. (C…
first May 23, 2023 -
Medium max 5.3USN-6098-1 8 CVEs
Jhead vulnerabilities
It was discovered that Jhead did not properly handle certain crafted images while processing the JFIF markers. An attacker could cause Jhead to crash. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. (CVE-2019-19035) It was d…
first May 23, 2023 -
High max 8.4USN-5995-1 30 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash, or possible execute arbitrary code. This issue only affected Ubuntu 14.04 E…
first Apr 4, 2023 -
Critical max 9.8USN-6054-2 1 CVE
python-django vulnerability
USN-6054-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Moataz Al-Sharida and nawaik discovered that Django incorrectly handled uploading multiple files us…
first May 25, 2023 -
Low max 3.5USN-6048-1 1 CVE
ZenLib vulnerability
It was discovered that ZenLib doesn't check the return value of a specific operation before using it. An attacker could use a specially crafted input to crash programs using the library.
first Apr 28, 2023 -
High max 7.5USN-6039-1 3 CVEs
openssl, openssl1.0 vulnerabilities
It was discovered that OpenSSL was not properly managing file locks when processing policy constraints. If a user or automated system were tricked into processing a certificate chain with specially crafted policy constraints, a remote attacker could possibly …
first Apr 25, 2023 -
High max 8.4USN-6026-1 20 CVEs
vim vulnerabilities
It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-4166) It was discovered that V…
first Apr 19, 2023