8,435 results · Feed
-
High max 7.5USN-4776-1 1 CVE
node-semver vulnerability
It was discovered that semver incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service.
first Mar 15, 2021 -
UnscoredUSN-4775-1 2 CVEs
lighttpd vulnerabilities
It was discovered that Lighttpd did not properly sanitized the string used in basic HTTP authentication method. A remote attacker could use this to inject arbitrary log entries and maybe obtain sensitive information. This issue only affected Ubuntu 14.04 ESM …
first Mar 15, 2021 -
High max 8.8USN-4774-1 6 CVEs
libspring-java vulnerabilities
Toshiaki Maki discovered that Spring Framework incorrectly handled certain XML files. A remote attacker could exploit this with a crafted XML file to cause a denial of service. (CVE-2015-3192) Alvaro Muñoz discovered that Spring Framework incorrectly handled …
first Mar 17, 2021 -
UnscoredUSN-4772-1 2 CVEs
vnc4 vulnerabilities
USN-2500-1 addressed CVE-2015-0255 for xorg-server. This update provides the corresponding fix for VNC4 on Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2015-0255) USN-2726-1 addressed CVE-2015-1283 for Expat. This update provides the corresponding fix for VNC4…
first Mar 15, 2021 -
UnscoredUSN-4771-1 2 CVEs
condor vulnerabilities
It was discovered that HTCondor incorrectly invoked the mailx utility. An attacker could use this vulnerability to execute arbitrary commands. This issue only affected Ubuntu 14.04 ESM. (CVE-2014-8126) It was discovered that HTCondor mishandled certain crafte…
first Mar 15, 2021 -
High max 8.8USN-4770-1 22 CVEs
glusterfs vulnerabilities
It was discovered that GlusterFS incorrectly handled network requests. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM. (CVE-2014-3619) It was discovered that GlusterFS incorrectly handled user…
first Mar 15, 2021 -
Critical max 9.8USN-4769-1 8 CVEs
salt vulnerabilities
It was discovered that Salt allowed remote attackers to write to arbitrary files via a special crafted file. An attacker could use this vulnerability to cause a DoS or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM. (CVE-2014-3563)…
first Mar 15, 2021 -
UnscoredUSN-4768-1 5 CVEs
musl vulnerabilities
It was discovered that musl did not properly handle kernel syscalls. An attacker could use this vulnerability to cause a denial of service (crash) or possibly execute arbitrary code. (CVE-2018-1000001) It was discovered that musl did not properly handle the p…
first Mar 15, 2021 -
Critical max 9.0USN-4767-1 9 CVEs
zabbix vulnerabilities
Fu Chuang discovered that Zabbix did not properly parse IPs. A remote attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2020-11800) It was discovered that Z…
first Jun 15, 2022 -
High max 7.3USN-4766-1 2 CVEs
commons-beanutils vulnerabilities
It was discovered that Apache Commons BeanUtils improperly handled certain input. An attacker could possibly use this vulnerability to cause a crash or execute arbitrary code.
first Mar 15, 2021 -
UnscoredUSN-4765-1 2 CVEs
sleuthkit vulnerabilities
It was discovered that The Sleuth Kit did not properly handle certain entires in FAT file systems. An attacker could use this vulnerability to mislead an analyst and obscure their activities. This issue only affected Ubuntu 14.04 ESM. (CVE-2012-5619) It was d…
first Mar 15, 2021 -
Critical max 9.8USN-4754-5 1 CVE
python2.7 vulnerability
USN-4754-1 fixed vulnerabilities in Python. Because of a regression, a subsequent update removed the fix for CVE-2021-3177. This update reinstates the security fix for CVE-2021-3177 in Ubuntu 14.04 ESM. Original advisory details: It was discovered that Python…
first Feb 8, 2022 -
UnscoredUSN-4754-2 0 CVEs
python2.7 regression
USN-4754-1 fixed a vulnerability in Python. The fix for CVE-2021-3177 introduced a regression in Python 2.7. This update reverts the security fix pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered t…
first Feb 25, 2021 -
Low max 3.3USN-4704-1 12 CVEs
libsndfile vulnerabilities
It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12562) It was discovered that l…
first Jan 26, 2021 -
High max 7.5USN-4700-1 1 CVE
pyxdg vulnerability
Alexandre D'Hondt discovered that PyXDG did not properly sanitize input. An attacker could exploit this with a crafted .menu file to execute arbitrary code.
first Jan 19, 2021 -
High max 7.5USN-4692-1 2 CVEs
tar vulnerabilities
Chris Siebenmann discovered that tar incorrectly handled extracting files resized during extraction when invoked with the --sparse flag. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu …
first Jan 13, 2021 -
UnscoredUSN-4672-1 5 CVEs
unzip vulnerabilities
Rene Freingruber discovered that unzip incorrectly handled certain specially crafted password protected ZIP archives. If a user or automated system using unzip were tricked into opening a specially crafted zip file, an attacker could exploit this to cause a c…
first Dec 16, 2020 -
Medium max 6.1USN-4666-2 1 CVE
lxml vulnerability
USN-4666-1 partially fixed a vulnerability in lxml, but an additional patch was needed. This update provides the corresponding additional patch in order to properly fix the vulnerability. Original advisory details: It was discovered that lxml incorrectly hand…
first Dec 11, 2020 -
UnscoredUSN-4868-1 1 CVE
libtomcrypt vulnerability
It was discovered that LibTomCrypt incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or read sensitive information.
first Mar 15, 2021 -
Medium max 6.1USN-4666-1 1 CVE
lxml vulnerability
It was discovered that lxml incorrectly handled certain HTML. An attacker could possibly use this issue to cross-site scripting (XSS) attacks.
first Dec 9, 2020 -
UnscoredUSN-4628-2 0 CVEs
intel-microcode regression
USN-4628-1 provided updated Intel Processor Microcode. Unfortunately, that update prevented certain processors in the Intel Tiger Lake family from booting successfully. This update reverts the microcode update for the Tiger Lake processor family. Please note …
first Nov 12, 2020 -
UnscoredUSN-4628-1 3 CVEs
intel-microcode vulnerabilities
Moritz Lipp, Michael Schwarz, Andreas Kogler, David Oswald, Catherine Easdon, Claudio Canella, and Daniel Gruss discovered that the Intel Running Average Power Limit (RAPL) feature of some Intel processors allowed a side- channel attack based on power consump…
first Nov 11, 2020 -
UnscoredUSN-4534-1 1 CVE
libdbi-perl vulnerability
It was discovered that Perl DBI module incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or expose sensitive information.
first Sep 23, 2020 -
UnscoredUSN-4802-1 2 CVEs
htslib vulnerabilities
It was discovered that HTSlib incorrectly handled certain data. An attacker could possibly use this issue to execute arbitrary code. This issue affected only Ubuntu 16.04 ESM. (CVE-2017-1000206) It was discovered that HTSlib incorrectly handled certain files.…
first Mar 15, 2021 -
UnscoredUSN-4503-1 1 CVE
libdbi-perl vulnerability
It was discovered that Perl DBI module incorrectly handled certain calls. An attacker could possibly use this issue to execute arbitrary code.
first Sep 16, 2020 -
UnscoredUSN-4624-1 1 CVE
libexif vulnerability
It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to cause unexpected behaviours, or execute arbitrary code.
first Nov 10, 2020 -
UnscoredUSN-4476-1 1 CVE
nss vulnerability
It was discovered that NSS incorrectly handled some inputs. An attacker could possibly use this issue to expose sensitive information.
first Aug 27, 2020 -
UnscoredUSN-4455-1 3 CVEs
nss vulnerabilities
It was discovered that NSS incorrectly handled certain signatures. An attacker could possibly use this issue to expose sensitive information. (CVE-2020-12400, CVE-2020-12401, CVE-2020-6829)
first Aug 10, 2020 -
UnscoredUSN-4432-2 0 CVEs
grub2, grub2-signed regression
USN-4432-1 fixed vulnerabilities in GRUB2 affecting Secure Boot environments. Unfortunately, the update introduced regressions for some BIOS systems (either pre-UEFI or UEFI configured in Legacy mode), preventing them from successfully booting. This update ad…
first Aug 4, 2020 -
High max 7.8USN-4402-1 2 CVEs
curl vulnerabilities
Marek Szlagor, Gregory Jefferis and Jeroen Ooms discovered that curl incorrectly handled certain credentials. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-8169…
first Jun 24, 2020 -
UnscoredUSN-4396-1 6 CVEs
libexif vulnerabilities
It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. (CVE-2020-0093, CVE-2020-0182) It was discovered that libexif incorrectly handled certain inputs. An attacker could p…
first Jun 16, 2020 -
Medium max 6.4USN-4432-1 8 CVEs
grub2, grub2-signed vulnerabilities
Jesse Michael and Mickey Shkatov discovered that the configuration parser in GRUB2 did not properly exit when errors were discovered, resulting in heap-based buffer overflows. A local attacker could use this to execute arbitrary code and bypass UEFI Secure Bo…
first Jul 29, 2020 -
UnscoredUSN-4386-1 1 CVE
libjpeg-turbo vulnerability
It was discovered that libjpeg-turbo incorrectly handled certain PPM files. An attacker could possibly use this issue to access sensitive information.
first Jun 9, 2020 -
UnscoredUSN-4385-1 3 CVEs
intel-microcode vulnerabilities
It was discovered that memory contents previously stored in microarchitectural special registers after RDRAND, RDSEED, and SGX EGETKEY read operations on Intel client and Xeon E3 processors may be briefly exposed to processes on the same or different processo…
first Jun 9, 2020 -
UnscoredUSN-4385-2 0 CVEs
intel-microcode regression
USN-4385-1 provided updated Intel Processor Microcode. Unfortunately, that update prevented certain processors in the Intel Skylake family (06_4EH) from booting successfully. Additonally, on Ubuntu 20.04 LTS, late loading of microcode was enabled, which could…
first Jun 10, 2020 -
High max 7.5USN-4863-1 1 CVE
node-fstream vulnerability
It was discovered that fstream incorrectly handled certain crafted tarballs. An attacker could use this vulnerability to write arbitrary files to the filesystem.
first Mar 15, 2021 -
UnscoredUSN-4860-1 2 CVEs
monit vulnerabilities
Zack Flack discovered that Monit incorrectly handled certain input. A remote authenticated user could exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2019-11454) Zack Flack discovered a buffer overread when Monit decoded certain crafted URLs.…
first Mar 15, 2021 -
High max 7.5USN-4378-1 1 CVE
flask vulnerability
It was discovered that Flask incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service.
first Jun 1, 2020 -
UnscoredUSN-4366-1 1 CVE
exim4 vulnerability
It was discovered that Exim incorrectly handled certain inputs. An remote attacker could possibly use this issue to access sensitive information or authentication bypass.
first May 19, 2020 -
High max 7.8USN-4360-4 1 CVE
json-c vulnerability
USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak that was reverted in USN-4360-2 and USN-4360-3. This update provides the correct fix update for CVE-2020-12762. Original advisory details: It was discovered that json-c inco…
first May 28, 2020