8,435 results · Feed
-
UnscoredUSN-5190-1 6 CVEs
graphicsmagick vulnerabilities
It was discovered that GraphicsMagick allowed reading arbitrary files via specially crafted images. An attacker could use this issue to expose sensitive information. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2019-1…
first Aug 30, 2022 -
UnscoredUSN-5189-1 1 CVE
A security issue was fixed in GLib
It was discovered that GLib incorrectly handled certain environment variables. An attacker could possibly use this issue to escalate privileges.
first Dec 13, 2021 -
UnscoredUSN-5177-1 1 CVE
inetutils vulnerability
It was discovered that Inetutils did not properly check the response of ftp requests. A remote attacker could use this vulnerability to cause a crash or run programs in the user machine.
first Aug 8, 2022 -
UnscoredUSN-5171-2 10 CVEs
lrzip vulnerabilities
USN-5171-1 fixed vulnerabilities in Long Range ZIP. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Long Range ZIP incorrectly handled certain specially crafted lrz fi…
first Dec 9, 2021 -
UnscoredUSN-5168-4 1 CVE
nss regression
USN-5168-3 fixed a vulnerability in NSS. Unfortunately that update introduced a regression that could break SSL connections. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Tavis Ormandy discovered that NSS incorr…
first Dec 7, 2021 -
UnscoredUSN-5173-2 2 CVEs
libmodbus vulnerabilities
USN-5173-1 fixed vulnerabilities in libmodbus. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that libmodbus incorrectly handled inputs. An attacker could possibly use thi…
first Dec 9, 2021 -
UnscoredUSN-5168-3 1 CVE
nss vulnerability
USN-5168-1 fixed a vulnerability in NSS. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Tavis Ormandy discovered that NSS incorrectly handled verifying DSA/RSA-PSS signatures. A remote attac…
first Dec 1, 2021 -
UnscoredUSN-5160-1 1 CVE
mc vulnerability
It was discovered that Midnight Commander would not check server fingerprints when establishing an SFTP connection. If a remote attacker were able to intercept communications this flaw could be exploited to impersonate the SFTP server.
first Aug 9, 2022 -
UnscoredUSN-5158-1 5 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain values when processing visual effects based image files. By tricking a user into opening a specially crafted image file, an attacker could crash the application causing a denial of service. (CVE-2…
first Nov 29, 2021 -
UnscoredUSN-5148-2 1 CVE
hivex vulnerability
USN-5148-1 fixed a vulnerability in hivex. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that hivex incorrectly handled certain input. An attacker could use this vulnerabi…
first Nov 16, 2021 -
High max 7.8USN-5147-1 6 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 14.04 ESM. (CVE-2017-17087) It was discovered that Vim incorrectly han…
first Nov 15, 2021 -
UnscoredUSN-5133-1 1 CVE
A security issue was fixed in ICU
It was discovered that ICU contains a use after free issue. An attacker could use this issue to cause a denial of service with crafted input.
first Nov 4, 2021 -
UnscoredUSN-5130-1 2 CVEs
linux vulnerabilities
Jann Horn discovered a race condition in the tty subsystem of the Linux kernel in the locking for the TIOCSPGRP ioctl(), leading to a use-after- free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execut…
first Nov 9, 2021 -
Medium max 5.3USN-5126-2 1 CVE
bind9 vulnerability
USN-5126-1 fixed a vulnerability in Bind. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Kishore Kumar Kothapalli discovered that Bind incorrectly handled the lame cache when processing resp…
first Oct 28, 2021 -
High max 7.8USN-5125-1 1 CVE
php5, php7.0, php7.2, php7.4, php8.0 vulnerability
It was discovered that PHP-FPM in PHP incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first Oct 27, 2021 -
UnscoredUSN-5122-2 0 CVEs
apport vulnerability
USN-5122-1 fixed a vulnerability in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Apport could be tricked into writing core files as root into arbitrary direc…
first Oct 26, 2021 -
UnscoredUSN-5119-1 2 CVEs
libcaca vulnerabilities
It was discovered that libcaca incorrectly handled certain images. An attacker could possibly use this issue to cause a crash. (CVE-2021-30498, CVE-2021-30499)
first Oct 21, 2021 -
UnscoredUSN-5114-1 4 CVEs
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that a race condition existed in the Atheros Ath9k WiFi driver in the Linux kernel. An attacker could possibly use this to expose sensitive information (WiFi network traffic). (CVE-2020-3702) It was discovered that the KVM hypervisor impleme…
first Oct 22, 2021 -
UnscoredUSN-5111-2 1 CVE
strongswan vulnerability
USN-5111-1 fixed a vulnerability in strongSwan. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that strongSwan incorrectly handled replacing certificates in the cache. A re…
first Oct 19, 2021 -
Critical max 9.8USN-5109-1 1 CVE
nginx vulnerability
It was discovered that nginx incorrectly handled files with certain modification dates. A remote attacker could possibly use this issue to cause a denial of service or other unspecified impact.
first Oct 18, 2021 -
UnscoredUSN-5108-2 1 CVE
libntlm vulnerability
USN-5108-1 fixed a vulnerability in Libntlm. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Libntlm incorrectly handled specially crafted NTML requests. An attacker co…
first Feb 15, 2022 -
Critical max 9.1USN-5102-2 2 CVEs
mercurial vulnerabilities
USN-5102-1 fixed vulnerabilities in Mercurial. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Mercurial mishandled symlinks in subrepositories. An attacker could use …
first Mar 16, 2021 -
High max 8.6USN-5093-1 3 CVEs
vim vulnerabilities
Brian Carpenter discovered that vim incorrectly handled memory when opening certain files. If a user was tricked into opening a specially crafted file, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrar…
first Sep 28, 2021 -
Critical max 9.0
apache2 vulnerabilities
USN-5090-1 fixed several vulnerabilities in Apache. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that the Apache HTTP Server incorrectly handled certain malformed request…
first Sep 27, 2021 -
UnscoredUSN-5089-2 0 CVEs
ca-certificates update
USN-5089-1 updated ca-certificates. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: The ca-certificates package contained a CA certificate that will expire on 2021-09-30 and will cause connec…
first Sep 23, 2021 -
High max 7.5USN-5083-1 2 CVEs
python3.4, python3.5 vulnerabilities
It was discovered that Python incorrectly handled certain RFCs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 ESM. (CVE-2021-3733) It was discovered that Python incorrectly handled certain server…
first Sep 16, 2021 -
UnscoredUSN-5073-1 5 CVEs
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon vulnerabilities
Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel allowed a guest VM to disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a guest VM could use this to read or write …
first Sep 9, 2021 -
UnscoredUSN-5062-1 1 CVE
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerability
Maxim Levitsky discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel did not properly prevent a guest VM from enabling AVIC in nested guest VMs. An attacker in a guest VM could use this to write to portions of the host's phy…
first Sep 8, 2021 -
UnscoredUSN-5079-4 0 CVEs
curl regression
USN-5079-2 fixed vulnerabilities in curl. One of the fixes introduced a regression. This update fixes the problem. Original advisory details: Patrick Monnerat discovered that curl incorrectly handled upgrades to TLS. When receiving certain responses from serv…
first Sep 21, 2021 -
High max 7.5USN-5079-2 2 CVEs
curl vulnerabilities
USN-5079-1 fixed several vulnerabilities in curl. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Patrick Monnerat discovered that curl incorrectly handled upgrades to TLS. When receiving cer…
first Sep 15, 2021 -
Medium max 6.5USN-5077-2 2 CVEs
apport vulnerabilities
USN-5077-1 fixed several vulnerabilities in Apport. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Maik Münch and Stephen Röttger discovered that Apport incorrectly handled certain informati…
first Sep 14, 2021 -
UnscoredUSN-5068-1 3 CVEs
libgd2 vulnerabilities
It was discovered that GD Graphics Library incorrectly handled certain GD and GD2 files. An attacker could possibly use this issue to cause a crash or expose sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 ESM,…
first Sep 8, 2021 -
High max 7.8USN-5064-3 1 CVE
cpio vulnerability
USN-5064-1 fixed a vulnerability in GNU. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Maverick Chung and Qiaoyi Fang discovered that cpio incorrectly handled certain pattern files. A remote attacker could use …
first Aug 3, 2023 -
UnscoredUSN-5060-2 0 CVEs
ntfs-3g vulnerabilities
USN-5060-1 fixed a vulnerability in NTFS-3G. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that NTFS-3G incorrectly handled certain image file. An attacker could possibly …
first Aug 31, 2021 -
UnscoredUSN-5056-1 1 CVE
apr vulnerability
It was discovered that APR incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information.
first Aug 30, 2021 -
UnscoredUSN-5054-2 1 CVE
uwsgi vulnerability
USN-5054-1 fixed a vulnerability in uWSGI for Ubuntu 18.04 LTS. This update provides the corresponding fixes for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Felix Wilhelm discovered a buffer overflow flaw in the mod_proxy_uwsgi module. A…
first Sep 3, 2021 -
UnscoredUSN-5051-4 0 CVEs
openssl regression
USN-5051-2 introduced a regression in OpenSSL that affected only Ubuntu 14.04 ESM. This update fix the regression. Original advisory details: Ingo Schwarze discovered that OpenSSL incorrectly handled certain ASN.1 strings. A remote attacker could use this iss…
first Sep 1, 2021 -
High max 7.4USN-5051-2 1 CVE
openssl vulnerability
USN-5051-1 fixed a vulnerability in OpenSSL. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Ingo Schwarze discovered that OpenSSL incorrectly handled certain ASN.1 strings. A remote attacker…
first Aug 26, 2021 -
UnscoredUSN-5044-1 3 CVEs
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities
It was discovered that the bluetooth subsystem in the Linux kernel did not properly handle HCI device initialization failure, leading to a double-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. (…
first Aug 24, 2021 -
High max 8.3
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerability
Andy Nguyen discovered that the netfilter subsystem in the Linux kernel contained an out-of-bounds write in its setsockopt() implementation. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
first Aug 12, 2021