8,435 results · Feed
-
High max 7.5USN-5408-1 1 CVE
dnsmasq vulnerability
Petr Menšík and Richard Johnson discovered that Dnsmasq incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code or expose sensitive information.
first May 10, 2022 -
UnscoredUSN-5398-1 1 CVE
libsdl1.2, libsdl2 vulnerability
It was discovered that SDL (Simple DirectMedia Layer) incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code.
first Apr 28, 2022 -
High max 7.8USN-5380-1 1 CVE
bash vulnerability
It was discovered that Bash did not properly drop privileges when the binary had the setuid bit enabled. An attacker could possibly use this issue to escalate privileges.
first Apr 20, 2022 -
UnscoredUSN-5379-1 4 CVEs
klibc vulnerabilities
It was discovered that klibc did not properly perform some mathematical operations, leading to an integer overflow. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-318…
first Apr 18, 2022 -
High max 8.8USN-5378-4 1 CVE
gzip vulnerability
USN-5378-1 fixed a vulnerability in Gzip. This update provides the corresponding update for Ubuntu 14.04 ESM and 16.04 ESM. Original advisory details: Cleemy Desu Wayo discovered that Gzip incorrectly handled certain filenames. If a user or automated system w…
first Apr 13, 2022 -
High max 8.8USN-5378-3 1 CVE
xz-utils vulnerability
USN-5378-2 fixed a vulnerability in XZ Utils. This update provides the corresponding update for Ubuntu 14.04 ESM and 16.04 ESM. Original advisory details: Cleemy Desu Wayo discovered that Gzip incorrectly handled certain filenames. If a user or automated syst…
first Apr 13, 2022 -
Critical max 9.8USN-5373-2 2 CVEs
python-django vulnerabilities
USN-5373-1 fixed several vulnerabilities in Django. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Django incorrectly handled certain certain column aliases in the Que…
first Apr 11, 2022 -
High max 7.5USN-5355-2 1 CVE
zlib vulnerability
USN-5355-1 fixed a vulnerability in zlib. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Danilo Ramos discovered that zlib incorrectly handled memory when performing certain deflating operat…
first Mar 30, 2022 -
High max 7.5USN-5354-2 1 CVE
twisted vulnerability
USN-5354-1 fixed vulnerabilities in Twisted. This update provides the corresponding updates for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 22.04 LTS. Original advisory details: It was discovered that Twisted incorrectly processed SSH handshake data on conn…
first May 5, 2022 -
High max 7.8
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 release_agent feature. A local attacker could use this to gain administrative privileges. (CVE-2022-0492) It was discover…
first Mar 22, 2022 -
High max 7.5USN-5342-2 2 CVEs
python2.7 vulnerabilities
USN-5342-1 fixed several vulnerabilities in Python. This update provides the corresponding update for Ubuntu 14.04 ESM, Ubuntu 20.04 ESM and Ubuntu 22.04 ESM. Original advisory details: It was discovered that Python incorrectly handled certain FTP requests. A…
first Aug 24, 2022 -
High max 7.5USN-5342-1 3 CVEs
python2.7, python3.4, python3.5, python3.6, python3.8 vulnerabilities
David Schwörer discovered that Python incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2021-3426) It was discovered that Python incorrectly handled c…
first Mar 28, 2022 -
UnscoredUSN-5333-2 4 CVEs
apache2 vulnerabilities
USN-5333-1 fixed several vulnerabilities in Apache. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Chamal De Silva discovered that the Apache HTTP Server mod_lua module incorrectly handled c…
first Mar 17, 2022 -
Medium max 6.5USN-5319-1 2 CVEs
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, ilinux-lts-xenial, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
Enrico Barberis, Pietro Frigo, Marius Muench, Herbert Bos, and Cristiano Giuffrida discovered that hardware mitigations added by Intel to their processors to address Spectre-BTI were insufficient. A local attacker could potentially use this to expose sensitiv…
first Mar 9, 2022 -
UnscoredUSN-5301-2 1 CVE
cyrus-sasl2 vulnerability
USN-5301-1 fixed a vulnerability in Cyrus. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that the Cyrus SASL SQL plugin incorrectly handled SQL input. A remote attacker co…
first Feb 22, 2022 -
UnscoredUSN-5299-1 13 CVEs
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation could reassemble mixed encrypted and plaintext fragments. A physically proximate attacker could possibly use this issue to inject packets or exfiltrate selected fragments. (CVE-2020-26147) I…
first Feb 22, 2022 -
Medium max 6.8USN-5332-2 1 CVE
bind9 vulnerability
USN-5332-1 fixed a vulnerability in Bind. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Xiang Li, Baojun Liu, Chaoyi Lu, and Changgen Zou discovered that Bind incorrectly handled certain bo…
first Mar 17, 2022 -
UnscoredUSN-5329-1 1 CVE
tar vulnerability
It was discovered that tar incorrectly handled certain files. An attacker could possibly use this issue to cause tar to crash, resulting in a denial of service.
first Mar 15, 2022 -
High max 7.5USN-5328-2 1 CVE
openssl vulnerability
USN-5328-1 fixed a vulnerability in OpenSSL. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Tavis Ormandy discovered that OpenSSL incorrectly parsed certain certificates. A remote attacker c…
first Mar 15, 2022 -
Critical max 9.8USN-5320-1 3 CVEs
expat vulnerabilities and regression
USN-5288-1 fixed several vulnerabilities in Expat. For CVE-2022-25236 it caused a regression and an additional patch was required. This update address this regression and several other vulnerabilities. It was discovered that Expat incorrectly handled certain …
first Mar 10, 2022 -
UnscoredUSN-5292-4 0 CVEs
snapd regression
USN-5292-1 fixed a vulnerability in snapd. Unfortunately that update introduced a regression that could break the fish shell. This update fixes the problem. We apologize for the inconvenience. Original advisory details: James Troup discovered that snap did no…
first Feb 24, 2022 -
High max 8.2USN-5292-3 4 CVEs
snapd vulnerabilities
USN-5292-1 fixed several vulnerabilities in snapd. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: James Troup discovered that snap did not properly manage the permissions for the snap direct…
first Feb 18, 2022 -
Critical max 9.8USN-5288-1 12 CVEs
expat vulnerabilities
It was discovered that Expat incorrectly handled certain files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first Feb 21, 2022 -
UnscoredUSN-5272-1 3 CVEs
hdf5 vulnerabilities
It was discovered that HDF5 incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service.
first Jul 20, 2022 -
High max 7.5USN-5269-2 2 CVEs
python-django vulnerabilities
USN-5269-1 fixed several vulnerabilities in Django. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Keryn Knight discovered that Django incorrectly handled certain template tags. A remote att…
first Feb 7, 2022 -
High max 8.8USN-5260-3 1 CVE
samba vulnerability
USN-5260-1 fixed a vulnerability in Samba. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Orange Tsai discovered that the Samba vfs_fruit module incorrectly handled certain memory operations…
first Feb 3, 2022 -
UnscoredUSN-5256-2 2 CVEs
uriparser vulnerabilities
USN-5256-1 fixed several vulnerabilities in uriparser. This update provides the corresponding update for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 20.04 ESM. Original advisory details: It was discovered that uriparser incorrectly handled certain memory op…
first Jul 18, 2022 -
UnscoredUSN-5254-1 2 CVEs
shadow vulnerabilities
It was discovered that shadow incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or expose sensitive information. This issue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2017-12424) It was discovered th…
first Jan 27, 2022 -
Critical max 10.0USN-5253-1 4 CVEs
ruby-rack vulnerabilities
It was discovered that Rack insecurely handled session ids. An unauthenticated remote attacker could possibly use this issue to perform a timing attack and hijack sessions. (CVE-2019-16782) It was discovered that Rack was incorrectly handling cookies during p…
first Dec 13, 2022 -
High max 7.8
policykit-1 vulnerability
USN-5252-1 fixed a vulnerability in policykit-1. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that the PolicyKit pkexec tool incorrectly handled command-line arguments. A…
first Jan 25, 2022 -
UnscoredUSN-5251-1 1 CVE
gegl vulnerability
It was discovered that GEGL incorrectly filtered and escaped file path input data when using the C system() function for execution of the ImageMagick convert command. An attacker could possibly use this to execute arbitrary code.
first Jul 27, 2022 -
UnscoredUSN-5250-2 1 CVE
strongswan vulnerability
USN-5250-1 fixed a vulnerability in strongSwan. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Zhuowei Zhang discovered that stringSwan incorrectly handled EAP authentication. A remote attac…
first Jan 24, 2022 -
UnscoredUSN-5243-2 1 CVE
aide vulnerability
USN-5243-1 fixed a vulnerability in aide. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: David Bouman discovered that AIDE incorrectly handled base64 operations. A local attacker could use t…
first Jan 20, 2022 -
UnscoredUSN-5237-1 2 CVEs
libmediainfo vulnerabilities
It was discovered that MediaInfoLib incorrectly handled certain specially crafted files. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-26797) It was discovered that MediaInfoLib incorrectly handled certain specially crafted…
first Aug 1, 2022 -
Medium max 6.1USN-5232-1 1 CVE
fail2ban vulnerability
Jakub Żoczek discovered that certain Fail2ban actions handled whois responses in an insecure way. If Fail2ban was configured to use certain mail actions like 'mail-whois' on a target system, a remote attacker who was able to control whois responses to this ta…
first Sep 12, 2022 -
Critical max 9.8USN-5227-2 5 CVEs
pillow vulnerabilities
USN-5227-1 fixed several vulnerabilities in Pillow. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Pillow incorrectly handled certain image files. If a user or automat…
first Jan 17, 2022 -
High max 8.2USN-5225-1 1 CVE
lxml vulnerability
It was discovered that lxml incorrectly handled certain XML and HTML files. An attacker could possibly use this issue to execute arbitrary code.
first Jan 12, 2022 -
UnscoredUSN-5212-2 2 CVEs
apache2 vulnerabilities
USN-5212-1 fixed several vulnerabilities in Apache. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that the Apache HTTP Server incorrectly handled certain forward proxy req…
first Jan 10, 2022 -
UnscoredUSN-5211-1 1 CVE
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerability
Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages.
first Jan 6, 2022 -
UnscoredUSN-5193-2 3 CVEs
xorg-server vulnerabilities
USN-5193-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain inputs. An at…
first Jan 26, 2022