Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

All Critical High Medium Low With exploited CVEs

8,435 results · Feed

  • High max 7.5
    USN-4852-1 2 CVEs

    vtk vulnerabilities

    It was discovered that VTK incorrectly handled certain XML files in the embedded Expat library. An attacker could possibly use this issue to cause a denial of service or expose sensitive information.

    first Mar 15, 2021
  • Unscored
    USN-4848-1 1 CVE

    mini-httpd vulnerability

    It was discovered that ACME mini_httpd did not properly handle HTTP GET requests with empty headers. A remote attacker could use this vulnerability to read arbitrary files.

    first Mar 15, 2021
  • Unscored
    USN-4845-1 1 CVE

    libcgroup vulnerability

    It was discovered that libcgroup incorrectly handled log file permissions. An attacker could possibly use this issue to obtain sensitive information.

    first Mar 15, 2021
  • Critical max 9.8
    USN-4843-1 21 CVEs

    phpmyadmin vulnerabilities

    Javier Nieto and Andres Rojas discovered that phpMyAdmin incorrectly managed input in the form of passwords. An attacker could use this vulnerability to cause a denial-of-service (DoS). This issue only affected Ubuntu 14.04 ESM. (CVE-2014-9218) Emanuel Bronsh…

    first Mar 16, 2021
  • High max 7.5
    USN-4839-1 2 CVEs

    python-gnupg vulnerabilities

    Marcus Brinkmann discovered that python-gnupg improperly handled certain command line parameters. A remote attacker could use this to spoof the output of python-gnupg and cause unsigned e-mail to appear signed. (CVE-2018-12020) It was discovered that python-g…

    first Mar 15, 2021
  • Unscored
    USN-4835-1 4 CVEs

    vcftools vulnerabilities

    It was discovered that VCFtools improperly handled certain input. If a user were tricked into opening a crafted input file, VCFtools could be made to crash or possibly cause other unspecified impact. (CVE-2018-11099, CVE-2018-11129, CVE-2018-11130) It was dis…

    first Mar 16, 2021
  • Unscored
    USN-4816-1 1 CVE

    game-music-emu vulnerability

    It was discovered that game-music-emu mishandled certain crafted input. A remote attacker could use this vulnerability to cause game-music-emu to crash.

    first Mar 15, 2021
  • Unscored
    USN-4826-1 7 CVEs

    soundtouch vulnerabilities

    It was discovered that SoundTouch incorrectly handled certain WAV files. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM. (CVE-2017-9258, CVE-2017-9259, CVE-2017-9260) It was discovered t…

    first Mar 15, 2021
  • Unscored
    USN-4825-1 1 CVE

    coin3 vulnerability

    USN-3356-1 fix a vulnerability in Expat. This update provides the corresponding update for Coin3D for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

    first Mar 15, 2021
  • High max 7.0
    USN-4819-1 3 CVEs

    leptonlib vulnerabilities

    It was discovered that Leptonica incorrectly handled path names. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 ESM. (CVE-2017-18196) It was discovered that Leptonica incorrectly handled certai…

    first Mar 15, 2021
  • High max 8.2
    USN-4818-1 5 CVEs

    opencv vulnerabilities

    It was discovered that OpenCV did not properly manage certain objects, leading to a divide-by-zero. If a user were tricked into loading a specially crafted file, a remote attacker could potentially use this issue to cause a denial of service or possibly execu…

    first Sep 28, 2022
  • Unscored
    USN-4817-1 3 CVEs

    hdf5 vulnerabilities

    It was discovered that HDF5 incorrectly handled certain hdf5 files. An attacker could possibly use this issue to cause a denial of service.

    first Mar 15, 2021
  • Unscored
    USN-4815-1 2 CVEs

    xrdp vulnerabilities

    It was discovered that xrdp did not properly validate certain input in the session manager. A local attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2017-16927) It was discovered that xrdp did not properly …

    first Mar 15, 2021
  • Unscored
    USN-4806-1 4 CVEs

    mpg123 vulnerability

    It was discovered that mpg123 failed to handle certain malformed mp3 files. An attacker could use this vulnerability to potentially leak sensitive information or cause a crash.

    first Mar 17, 2021
  • Unscored
    USN-4808-1 1 CVE

    tinyproxy vulnerability

    It was discovered that Tinyproxy created its pid file with insecure permissions. An attacker could use the vulnerability to cause arbitrary processes to be killed, resulting in a denial of service.

    first Mar 15, 2021
  • Unscored
    USN-4805-1 2 CVEs

    vlc vulnerabilities

    It was discovered that VLC mishandled certain crafted media files. An attacker could use this vulnerability to cause a denial of service (crash) or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM. (CVE-2017-10699) It was discovered …

    first Mar 15, 2021
  • Unscored
    USN-4803-1 2 CVEs

    gifsicle vulnerabilities

    It was discovered that Gifsicle did not properly handle certain input. If a user were tricked into opening a malicious GIF, an attacker could potentially execute arbitrary code.

    first Mar 15, 2021
  • Unscored
    USN-4801-1 1 CVE

    root-system vulnerability

    It was discovered that ROOT incorrectly handled certain input arguments. An attacker could possibly use this issue to execute arbitrary code.

    first Mar 15, 2021
  • High max 7.5
    USN-5675-1 4 CVEs

    heimdal vulnerabilities

    Isaac Boukris and Andrew Bartlett discovered that Heimdal's KDC was not properly performing checksum algorithm verifications in the S4U2Self extension module. An attacker could possibly use this issue to perform a machine-in-the-middle attack and request S4U2…

    first Oct 13, 2022
  • Unscored
    USN-5673-1 3 CVEs

    unzip vulnerabilities

    It was discovered that unzip did not properly handle unicode strings under certain circumstances. If a user were tricked into opening a specially crafted zip file, an attacker could possibly use this issue to cause unzip to crash, resulting in a denial of ser…

    first Oct 13, 2022
  • High max 7.5
    USN-4799-1 1 CVE

    r-base vulnerability

    It was discovered that a buffer overflow in R causes memory corruption. An attacker could possibly use this to cause a denial of service or execute arbitrary code.

    first Mar 15, 2021
  • Unscored
    USN-4798-1 2 CVEs

    libgit2 vulnerabilities

    It was discovered that libgit2 mishandled certain malformed git objects. A remote attacker could use this vulnerability to cause a denial of service.

    first Mar 15, 2021
  • Unscored
    USN-4797-1 4 CVEs

    libass vulnerabilities

    It was discovered that LibASS incorrectly handled certain ASS files. A remote attacker could possibly use this issue to cause a denial of service. One of the issues, CVE-2016-7970, only affected Ubuntu 16.04 ESM. (CVE-2016-7969, CVE-2016-7970, CVE-2016-7972) …

    first May 4, 2022
  • Unscored
    USN-4793-1 3 CVEs

    collectd vulnerabilities

    It was discovered that collectd mishandled certain malformed packets. A remote attacker could use this vulnerability to cause collectd to crash or possibly execute arbitrary code. (CVE-2016-6254) It was discovered that collectd failed to handle certain input.…

    first Mar 15, 2021
  • Unscored
    USN-4792-1 3 CVEs

    freeipa vulnerabilities

    It was discovered that FreeIPA incorrectly handled certificates. An attacker could possibly use this issue to cause a denial of service by revoking arbitrary certificates This issue only affected Ubuntu 16.04 ESM. (CVE-2016-5404) It was discovered that FreeIP…

    first Mar 15, 2021
  • Unscored
    USN-4790-1 1 CVE

    libtorrent vulnerability

    It was discovered that libtorrent incorrectly handled chunked headers. A remote attacker could possibly use this to cause a crash resulting in a denial of service.

    first Mar 15, 2021
  • High max 7.5
    USN-4789-1 3 CVEs

    zookeeper vulnerabilities

    It was discovered that Apache ZooKeeper incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2016-5017) It was discovered that Apache ZooKeeper incorrectly implemented "wc…

    first Mar 15, 2021
  • Unscored
    USN-4787-1 1 CVE

    jq vulnerability

    It was discovered that jq did not perform sufficient bounds checking, resulting in unbounded resource consumption. An attacker could use this vulnerability to cause a denial of service.

    first Mar 15, 2021
  • High max 7.5
    USN-4783-1 1 CVE

    node-minimatch vulnerability

    It was discovered that minimatch did not perform necessary bounds checking on regular expressions. An attacker could use this vulnerability to cause a denial of service.

    first Mar 15, 2021
  • Unscored
    USN-4781-1 9 CVEs

    slurm-llnl vulnerabilities

    It was discovered that Slurm incorrectly handled certain messages between the daemon and the user. An attacker could possibly use this issue to assume control of an arbitrary file on the system. This issue only affected Ubuntu 16.04 ESM. (CVE-2016-10030) It w…

    first May 25, 2022
  • Unscored
    USN-4781-2 2 CVEs

    slurm-llnl vulnerabilities

    USN-4781-1 fixed several vulnerabilities in Slurm. This update provides the corresponding updates for Ubuntu 14.04 ESM (CVE-2016-10030) and Ubuntu 16.04 ESM (CVE-2018-10995). Original advisory details: It was discovered that Slurm incorrectly handled certain …

    first Feb 1, 2023
  • Unscored
    USN-4778-1 2 CVEs

    ocaml vulnerabilities

    It was discovered that OCaml mishandled sign extensions. A remote attacker could use this vulnerability to steal sensitive information, cause a denial of service (crash), or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 ESM. (CVE-2015…

    first Mar 15, 2021
  • Unscored
    USN-5185-1 1 CVE

    libmatio vulnerability

    It was discovered that MATIO incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information.

    first Aug 10, 2022
  • Unscored
    USN-5172-2 4 CVEs

    uriparser vulnerability

    USN-5172-1 fixed vulnerabilities in uriparser. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that uriparser mishandled certain input. An attacker could use this vulnerabi…

    first Dec 9, 2021
  • Unscored
    USN-4779-1 1 CVE

    php-gettext vulnerability

    Danilo Segan discovered that Gettext mishandled certain input. An attacker could use this vulnerability to execute arbitrary code.

    first Mar 15, 2021
  • Unscored
    USN-4886-1 14 CVEs

    privoxy vulnerabilities

    It was discovered that Privoxy incorrectly handled CGI requests. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2020-35502, CVE-2021-20209, CVE-2021-20210, CVE-2021-20213, CVE-2021-20215, CVE-2021-…

    first Mar 22, 2021
  • Unscored
    USN-4869-1 1 CVE

    aria2 vulnerability

    It was discovered that aria2 could accidentally leak authentication data. An attacker could possibly use this to gain access to sensitive information.

    first Mar 15, 2021
  • Unscored
    USN-4796-1 9 CVEs

    nodejs vulnerabilities

    Alexander Minozhenko and James Bunton discovered that Node.js did not properly handle wildcards in name fields of X.509 TLS certificates. An attacker could use this vulnerability to execute a machine-in-the-middle- attack. This issue only affected Ubuntu 14.0…

    first Mar 15, 2021
  • Unscored
    USN-4780-1 12 CVEs

    lame vulnerabilities

    It was discovered that LAME incorrectly handled certain audio files. A remote attacker could possibly use this issue to cause a denial of service. Eight vulnerabilities (CVE-2015-9099, CVE-2015-9100, CVE-2015-9101, CVE-2017-15018, CVE-2017-11720, CVE-2017-841…

    first Aug 29, 2022
  • High max 7.5
    USN-4777-1 1 CVE

    node-tar vulnerability

    It was discovered that node-tar mishandled certain tar archives. An attacker could use this vulnerability to write arbitrary files to the filesystem.

    first Mar 15, 2021