8,435 results · Feed
-
UnscoredUSN-5990-1 2 CVEs
musl vulnerabilities
It was discovered that musl did not handle certain i386 math functions properly. An attacker could use this vulnerability to cause a denial of service (crash) or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and…
first Mar 31, 2023 -
High max 7.5USN-6034-1 1 CVE
dnsmasq vulnerability
It was discovered that Dnsmasq was sending large DNS messages over UDP, possibly causing transmission failures due to IP fragmentation. This update lowers the default maximum size of DNS messages to improve transmission reliability over UDP.
first Apr 20, 2023 -
Medium max 6.5USN-6028-1 2 CVEs
libxml2 vulnerabilities
It was discovered that lixml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2023-28484) It was discovered that libxml2 incorrectly handled certain XML files. An attacker could…
first Apr 19, 2023 -
High max 7.8USN-5974-1 7 CVEs
graphicsmagick vulnerabilities
It was discovered that GraphicsMagick was not properly performing bounds checks when processing TGA image files, which could lead to a heap buffer overflow. If a user or automated system were tricked into processing a specially crafted TGA image file, an atta…
first Mar 27, 2023 -
UnscoredUSN-5971-1 3 CVEs
graphviz vulnerabilities
It was discovered that graphviz contains null pointer dereference vulnerabilities. Exploitation via a specially crafted input file can cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-10196) It was discovered that graphviz conta…
first Mar 24, 2023 -
High max 8.1USN-5968-1 1 CVE
python-git vulnerability
It was discovered that GitPython did not properly sanitize user inputs for remote URLs in the clone command. By injecting a maliciously crafted remote URL, an attacker could possibly use this issue to execute arbitrary commands on the host.
first Mar 22, 2023 -
UnscoredUSN-5966-2 0 CVEs
amanda regression
USN-5966-1 fixed vulnerabilities in amanda. Unfortunately it introduced a regression in GNUTAR-based backups. This update reverts all of the changes in amanda until a better fix is provided. We apologize for the inconvenience. Original advisory details: Maher…
first Mar 23, 2023 -
High max 7.8USN-5963-1 9 CVEs
vim vulnerabilities
It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LT…
first Mar 20, 2023 -
High max 8.8USN-5953-1 2 CVEs
ipython vulnerabilities
It was discovered that IPython incorrectly processed REST API POST requests. An attacker could possibly use this issue to launch a cross-site request forgery (CSRF) attack and leak user's sensitive information. This issue only affected Ubuntu 14.04 ESM. (CVE-…
first Mar 15, 2023 -
High max 8.5
libxstream-java vulnerabilities
Lai Han discovered that XStream incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affect…
first Mar 13, 2023 -
High max 7.5USN-5945-1 3 CVEs
protobuf vulnerabilities
It was discovered that Protocol Buffers did not properly validate field com.google.protobuf.UnknownFieldSet in protobuf-java. An attacker could possibly use this issue to perform a denial of service attack. This issue only affected protobuf Ubuntu 22.04 LTS a…
first Mar 13, 2023 -
Medium max 6.8USN-5923-1 10 CVEs
tiff vulnerabilities
It was discovered that LibTIFF could be made to read out of bounds when processing certain malformed image files with the tiffcrop tool. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause tif…
first Mar 6, 2023 -
Critical max 9.8USN-5964-2 3 CVEs
curl vulnerabilities
USN-5964-1 fixed several vulnerabilities in curl. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Harry Sintonen discovered that curl incorrectly handled certain TELNET connection options. Du…
first Mar 27, 2023 -
High max 7.5USN-5960-1 1 CVE
python2.7, python3.10, python3.5, python3.6, python3.8 vulnerability
Yebo Cao discovered that Python incorrectly handled certain URLs. An attacker could possibly use this issue to bypass blocklisting methods by supplying a URL that starts with blank characters.
first Mar 16, 2023 -
High max 7.5USN-5944-1 4 CVEs
snakeyaml vulnerabilities
It was discovered that SnakeYAML did not limit the maximal nested depth for collections when parsing YAML data. If a user or automated system were tricked into opening a specially crafted YAML file, an attacker could possibly use this issue to cause applicati…
first Mar 10, 2023 -
Medium max 5.5USN-5928-1 2 CVEs
systemd vulnerabilities
It was discovered that systemd did not properly validate the time and accuracy values provided to the format_timespan() function. An attacker could possibly use this issue to cause a buffer overrun, leading to a denial of service attack. This issue only affec…
first Mar 7, 2023 -
UnscoredUSN-5916-1 1 CVE
linux vulnerability
Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service (system crash) or possi…
first Mar 3, 2023 -
Medium max 5.5USN-6129-2 1 CVE
avahi vulnerability
USN-6129-1 fixed a vulnerability in Avahi. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that Avahi incorrectly handled certain DBus messages. A local at…
first Jul 25, 2023 -
High max 8.2USN-6117-1 7 CVEs
batik vulnerabilities
It was discovered that Apache Batik incorrectly handled certain inputs. An attacker could possibly use this to perform a cross site request forgery attack. (CVE-2019-17566, CVE-2020-11987, CVE-2022-38398, CVE-2022-38648) It was discovered that Apache Batik in…
first May 30, 2023 -
UnscoredUSN-6113-1 1 CVE
Jhead vulnerability
It was discovered that Jhead did not properly handle certain crafted images while processing the Exif markers. An attacker could possibly use this issue to crash Jhead, resulting in a denial of service.
first May 30, 2023 -
High max 8.1USN-6112-1 1 CVE
perl vulnerability
It was discovered that Perl was not properly verifying TLS certificates when using CPAN together with HTTP::Tiny to download modules over HTTPS. If a remote attacker were able to intercept communications, this flaw could potentially be used to install altered…
first May 29, 2023 -
UnscoredUSN-6110-1 3 CVEs
Jhead vulnerabilities
It was discovered that Jhead did not properly handle certain crafted Canon images when processing them. An attacker could possibly use this issue to crash Jhead, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ub…
first May 29, 2023 -
High max 7.5USN-5910-1 3 CVEs
ruby-rack vulnerabilities
It was discovered that Rack did not properly structure regular expressions in some of its parsing components, which could result in uncontrolled resource consumption if an application using Rack received specially crafted input. A remote attacker could possib…
first Mar 2, 2023 -
UnscoredUSN-5904-2 1 CVE
sox regression
USN-5904-1 fixed vulnerabilities in SoX. It was discovered that the fix for CVE-2021-33844 was incomplete. This update fixes the problem. Original advisory details: Helmut Grohne discovered that SoX incorrectly handled certain inputs. If a user or an automate…
first Mar 20, 2023 -
UnscoredUSN-6008-1 1 CVE
exo vulnerability
It was discovered that Exo did not properly sanitized desktop files. A remote attacker could possibly use this issue to to cause a crash or arbitrary code execution.
first Apr 11, 2023 -
Critical max 10.0USN-5904-1 9 CVEs
sox vulnerabilities
Helmut Grohne discovered that SoX incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affe…
first Mar 2, 2023 -
Medium max 5.5USN-5900-1 1 CVE
tar vulnerability
It was discovered that tar incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information or cause a crash.
first Feb 28, 2023 -
Critical max 9.8USN-5887-1 2 CVEs
clamav vulnerabilities
Simon Scannell discovered that ClamAV incorrectly handled parsing HFS+ files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2023-20032) Simon Scannell discovered tha…
first Feb 27, 2023 -
Medium max 5.9USN-5894-1 3 CVEs
curl vulnerabilities
Harry Sintonen and Tomas Hoger discovered that curl incorrectly handled TELNET connections when the -t option was used on the command line. Uninitialized data possibly containing sensitive information could be sent to the remote server, contrary to expectatio…
first Feb 27, 2023 -
High max 8.8USN-5892-2 1 CVE
nss vulnerability
USN-5892-1 fixed a vulnerability in NSS. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Christian Holler discovered that NSS incorrectly handled certain PKCS 12 certificated bundles. A remot…
first Mar 6, 2023 -
High max 8.8USN-5872-1 2 CVEs
nss vulnerabilities
Tavis Ormandy discovered that NSS incorrectly handled an empty pkcs7 sequence. A remote attacker could possibly use this issue to cause NSS to crash, resulting in a denial of service. (CVE-2022-22747) Ronald Crane discovered that NSS incorrectly handled certa…
first Feb 15, 2023 -
UnscoredUSN-5870-1 1 CVE
APR-util vulnerability
Ronald Crane discovered that APR-util did not properly handled memory when encoding or decoding certain input data. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code.
first Feb 14, 2023 -
Medium max 6.5USN-5855-4 2 CVEs
imagemagick vulnerabilities
USN-5855-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that ImageMagick incorrectly handled certain PNG images. If a user or autom…
first Apr 17, 2023 -
High max 7.5USN-5849-1 1 CVE
heimdal vulnerabilities
Helmut Grohne discovered that Heimdal GSSAPI incorrectly handled logical conditions that are related to memory management operations. An attacker could possibly use this issue to cause a denial of service.
first Feb 8, 2023 -
High max 7.5USN-5845-2 2 CVEs
openssl vulnerabilities
USN-5845-1 fixed several vulnerabilities in OpenSSL. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: David Benjamin discovered that OpenSSL incorrectly handled X.400 address processing. A rem…
first Feb 7, 2023 -
High max 7.8USN-5843-1 1 CVE
tmux vulnerability
It was discovered that tmux incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service.
first Feb 6, 2023 -
UnscoredUSN-5840-1 6 CVEs
lrzip vulnerabilities
It was discovered that Long Range ZIP incorrectly handled pointers. If a user or an automated system were tricked into opening a certain specially crafted ZIP file, an attacker could possibly use this issue to cause a denial of service. This issue only affect…
first Feb 2, 2023 -
High max 7.8USN-5836-1 5 CVEs
vim vulnerabilities
It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Jan 31, 2023 -
High max 8.8USN-5828-1 2 CVEs
krb5 vulnerabilities
It was discovered that Kerberos incorrectly handled certain S4U2Self requests. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2018-20217) Greg Hudson discove…
first Jan 25, 2023 -
Medium max 6.3USN-5841-1 6 CVEs
tiff vulnerabilities
It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute …
first Feb 2, 2023