Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

All Critical High Medium Low With exploited CVEs

8,435 results · Feed

  • High max 7.5
    USN-5651-2 1 CVE

    strongswan vulnerability

    USN-5651-1 fixed a vulnerability in strongSwan. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Lahav Schlesinger discovered that strongSwan incorrectly handled certain OCSP URIs and and CRL …

    first Oct 3, 2022
  • High max 8.1
    USN-5638-4 2 CVEs

    expat vulnerabilities

    USN-5638-1 fixed several vulnerabilities in Expat. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Rhodri James discovered that Expat incorrectly handled memory when processing certain malformed XML files. An att…

    first Feb 28, 2023
  • High max 8.4
    USN-5613-1 7 CVEs

    vim vulnerabilities

    It was discovered that Vim was not properly performing bounds checks when executing spell suggestion commands. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-0943) It was discovered that Vim was usi…

    first Sep 15, 2022
  • Medium max 6.5
    USN-5658-3 2 CVEs

    isc-dhcp vulnerabilities

    USN-5658-1 fixed several vulnerabilities in DHCP. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that DHCP incorrectly handled option reference counting. A remote attacker could possibly use th…

    first Nov 21, 2022
  • Unscored
    USN-5637-1 1 CVE

    libvpx vulnerability

    It was discovered that libvpx incorrectly handled certain WebM media files. A remote attacker could use this issue to crash an application using libvpx under certain conditions, resulting in a denial of service.

    first Sep 26, 2022
  • Medium max 5.5
    USN-5636-1 1 CVE

    sosreport vulnerability

    It was discovered that SoS incorrectly handled certain data. An attacker could possibly use this issue to expose sensitive information.

    first Sep 26, 2022
  • High max 7.5
    USN-5626-2 2 CVEs

    bind9 vulnerabilities

    USN-5626-1 fixed several vulnerabilities in Bind. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Yehuda Afek, Anat Bremler-Barr, and Shani Stajnrod discovered that Bind incorrectly handled l…

    first Sep 21, 2022
  • Medium max 5.5
    USN-5619-1 7 CVEs

    tiff vulnerabilities

    It was discovered that LibTIFF was not properly performing the calculation of data that would eventually be used as a reference for bound-checking operations. An attacker could possibly use this issue to cause a denial of service or to expose sensitive inform…

    first Sep 20, 2022
  • Unscored
    USN-5615-3 1 CVE

    sqlite3 vulnerability

    USN-5615-1 fixed several vulnerabilities in SQLite. This update provides the corresponding fix for CVE-2020-35525 for Ubuntu 14.04 LTS. Original advisory details: It was discovered that SQLite incorrectly handled INTERSEC query processing. An attacker could u…

    first Jun 27, 2024
  • Unscored
    USN-5604-1 3 CVEs

    tiff vulnerabilities

    It was discovered that LibTIFF incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2022-2867, CVE-2022-2869) It was discovered that LibTIFF incorrectly handled cer…

    first Sep 8, 2022
  • Medium max 5.3
    USN-5588-1 1 CVE

    linux vulnerability

    Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system cr…

    first Aug 30, 2022
  • Low max 3.7
    USN-5587-1 1 CVE

    curl vulnerability

    Axel Chong discovered that when curl accepted and sent back cookies containing control bytes that a HTTP(S) server might return a 400 (Bad Request Error) response. A malicious cookie host could possibly use this to cause denial-of-service.

    first Sep 1, 2022
  • High max 8.8
    USN-5575-2 2 CVEs

    libxslt vulnerabilities

    USN-5575-1 fixed vulnerabilities in Libxslt. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Nicolas Grégoire discovered that Libxslt incorrectly handled certain XML. An attacker could possi…

    first Aug 22, 2022
  • Unscored
    USN-5574-1 1 CVE

    exim4 vulnerability

    It was discovered that Exim incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code.

    first Aug 22, 2022
  • Critical max 9.8
    USN-5570-1 1 CVE

    zlib vulnerability

    Evgeny Legerov discovered that zlib incorrectly handled memory when performing certain inflate operations. An attacker could use this issue to cause zlib to crash, resulting in a denial of service, or possibly execute arbitrary code.

    first Aug 17, 2022
  • Unscored
    USN-5558-1 2 CVEs

    libcdio vulnerabilities

    Zhao Liang discovered that libcdio was not properly performing memory management operations when processing ISO files, which could result in a heap buffer overflow or in a NULL pointer dereference. If a user or automated system were tricked into opening a spe…

    first Aug 10, 2022
  • Medium max 5.3
    USN-5557-1 2 CVEs 1 exploited

    linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

    Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system cr…

    first Aug 9, 2022
  • Unscored
    USN-5553-1 4 CVEs

    libjpeg-turbo vulnerabilities

    It was discovered that libjpeg-turbo was not properly handling EOF characters, which could lead to excessive memory consumption through the execution of a large loop. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-11813) It …

    first Aug 8, 2022
  • Critical max 9.8
    USN-5532-2 1 CVE

    python-bottle vulnerability

    USN-5532-1 fixed a vulnerability in Bottle. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM Original advisory details: It was discovered that Bottle incorrectly handled errors during early request binding. An attacker c…

    first Jul 26, 2022
  • High max 7.7
    USN-5523-1 7 CVEs

    tiff vulnerabilities

    It was discovered that LibTIFF was not properly performing checks to guarantee that allocated memory space existed, which could lead to a NULL pointer dereference via a specially crafted file. An attacker could possibly use this issue to cause a denial of ser…

    first Jul 19, 2022
  • High max 7.3
    USN-5520-2 1 CVE

    libhttp-daemon-perl vulnerability

    USN-5520-1 fixed a vulnerability in HTTP-Daemon. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that HTTP-Daemon incorrectly handled certain crafted requests. A remote atta…

    first Jul 18, 2022
  • Unscored
    USN-5503-2 1 CVE

    gnupg, gnupg2 vulnerability

    USN-5503-1 fixed a vulnerability in GnuPG. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Demi Marie Obenour discovered that GnuPG incorrectly handled injection in the status message. A remo…

    first Jul 12, 2022
  • High max 7.5
    USN-5499-1 2 CVEs

    curl vulnerabilities

    Florian Kohnhuser discovered that curl incorrectly handled returning a TLS server’s certificate chain details. A remote attacker could possibly use this issue to cause curl to stop responding, resulting in a denial of service. (CVE-2022-27781) Harry Sintonen …

    first Jul 1, 2022
  • Unscored
    USN-5497-1 5 CVEs

    libjpeg6b vulnerabilities

    It was discovered that Libjpeg6b was not properly performing bounds checks when compressing PPM and Targa image files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-11212) Chijin Zhou discovered that Libjpeg6b was incorrect…

    first Jun 30, 2022
  • Critical max 9.1
    USN-5487-3 7 CVEs

    apache2 regression

    USN-5487-1 fixed several vulnerabilities in Apache HTTP Server. Unfortunately it caused regressions. USN-5487-2 reverted the patches that caused the regression in Ubuntu 14.04 ESM for further investigation. This update re-adds the security fixes for Ubuntu 14…

    first Jun 23, 2022
  • Unscored
    USN-5487-2 0 CVEs

    apache2 regression

    USN-5487-1 fixed several vulnerabilities in Apache. Unfortunately, that update introduced a regression when proxying balancer manager connections in some configurations on Ubuntu 14.04 ESM. This update reverts those changes till further fix. We apologize for …

    first Jun 23, 2022
  • Medium max 6.7
    USN-5484-1 5 CVEs

    linux vulnerabilities

    It was discovered that the Linux kernel did not properly restrict access to the kernel debugger when booted in secure boot environments. A privileged attacker could use this to bypass UEFI Secure Boot restrictions. (CVE-2022-21499) It was discovered that a ra…

    first Jun 16, 2022
  • High max 7.1
    USN-5477-1 6 CVEs

    ncurses vulnerabilities

    Hosein Askari discovered that ncurses was incorrectly performing memory management operations when dealing with long filenames while writing structures into the file system. An attacker could possibly use this issue to cause a denial of service or execute arb…

    first Jun 14, 2022
  • High max 7.8
    USN-5464-1 1 CVE

    e2fsprogs vulnerability

    Nils Bars discovered that e2fsprogs incorrectly handled certain file systems. A local attacker could use this issue with a crafted file system image to possibly execute arbitrary code.

    first Jun 7, 2022
  • Unscored
    USN-5448-1 11 CVEs

    ncurses vulnerabilities

    It was discovered that ncurses was not properly checking array bounds when executing the fmt_entry function, which could result in an out-of-bounds write. An attacker could possibly use this issue to execute arbitrary code. (CVE-2017-10684) It was discovered …

    first May 26, 2022
  • Critical max 9.1
    USN-5487-1 7 CVEs

    apache2 vulnerabilities

    It was discovered that Apache HTTP Server mod_proxy_ajp incorrectly handled certain crafted request. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. (CVE-2022-26377) It was discovered that Apache HTTP Server incorr…

    first Jun 21, 2022
  • Medium max 6.7
    USN-5463-2 7 CVEs

    ntfs-3g vulnerabilities

    USN-5463-1 fixed vulnerabilities in NTFS-3G. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Roman Fiedler discovered that NTFS-3G incorrectly handled certain return codes. A local attacker …

    first Aug 2, 2022
  • Unscored
    USN-5456-1 1 CVE

    imagemagick vulnerability

    It was discovered that ImageMagick incorrectly handled memory under certain circumstances. If a user were tricked into opening a specially crafted image, an attacker could possibly exploit this issue to cause a denial of service or other unspecified impact.

    first Jun 1, 2022
  • Unscored
    USN-5452-1 1 CVE

    ntfs-3g vulnerability

    It was discovered that NTFS-3G was incorrectly validating NTFS metadata in its ntfsck tool by not performing boundary checks. A local attacker could possibly use this issue to cause a denial of service or to execute arbitrary code.

    first May 30, 2022
  • Unscored
    USN-5438-2 1 CVE

    htmldoc vulnerability

    USN-5438-1 fixed a vulnerability in HTMLDOC. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that HTMLDOC did not properly manage memory under certain circumstances. If a us…

    first May 24, 2022
  • Unscored
    USN-5425-1 2 CVEs

    pcre3 vulnerabilities

    Yunho Kim discovered that PCRE incorrectly handled memory when handling certain regular expressions. An attacker could possibly use this issue to cause applications using PCRE to expose sensitive information. This issue only affects Ubuntu 18.04 LTS, Ubuntu 2…

    first May 17, 2022
  • Unscored
    USN-5424-2 1 CVE

    openldap vulnerability

    USN-5424-1 fixed a vulnerability in OpenLDAP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that OpenLDAP incorrectly handled certain SQL statements within LDAP queries in…

    first May 19, 2022
  • High max 7.5
    USN-5422-1 2 CVEs

    libxml2 vulnerabilities

    Shinji Sato discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM, and Ubuntu …

    first May 16, 2022
  • High max 8.6
    USN-5423-2 5 CVEs

    clamav vulnerabilities

    USN-5423-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 14.04 ESM and 16.04 ESM. Original advisory details: Michał Dardas discovered that ClamAV incorrectly handled parsing CHM files. A remote attacker coul…

    first May 17, 2022
  • Medium max 6.1
    USN-5421-1 5 CVEs

    tiff vulnerabilities

    It was discovered that LibTIFF incorrectly handled certain images. An attacker could possibly use this issue to cause a crash, resulting in a denial of service. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.…

    first May 16, 2022