8,437 results · Feed
-
High max 7.5USN-7488-1 3 CVEs
python vulnerabilities
It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack. This issue only affected python 2.7 and python3.4 on Ubuntu 14.04 LTS; python2.7…
first May 6, 2025 -
Low max 2.9USN-7485-1 4 CVEs
libraw vulnerabilities
It was discovered that LibRaw could be made to read out of bounds. An attacker could possibly use this issue to cause applications using LibRaw to crash, resulting in a denial of service. (CVE-2025-43961, CVE-2025-43962, CVE-2025-43963, CVE-2025-43964)
first May 6, 2025 -
High max 7.4USN-7480-1 3 CVEs
openjdk-8 vulnerabilities
Alicja Kario discovered that the JSSE component of OpenJDK 8 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain sensitive information. (CVE-2025-21587) It was discovered that the Compiler component of OpenJDK 8 incorrectly ha…
first May 6, 2025 -
Medium max 5.6USN-7467-2 2 CVEs
libxml2 vulnerabilities
USN-7467-1 fixed several vulnerabilities in libxml2. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that the libxml2 Python bindings incorrectly handled certain return valu…
first Apr 28, 2025 -
Medium max 6.5USN-7465-1 3 CVEs
mistral, python-mistral-lib vulnerabilities
It was discovered that Mistral incorrectly handled nested anchors in YAML files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-16848) Pierre Gaxatte discovered that Mistral incorre…
first Apr 28, 2025 -
Critical max 10.0
erlang vulnerability
USN-7443-1 fixed a vulnerability in Erlang. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk discovered that Erlang OTP’s SSH …
first Jul 17, 2025 -
Medium max 6.6USN-7442-1 4 CVEs
ruby2.3, ruby2.5 vulnerabilities
It was discovered that the Ruby CGI gem incorrectly handled parsing certain cookies. A remote attacker could possibly use this issue to consume resources, leading to a denial of service. (CVE-2025-27219) It was discovered that the Ruby CGI gem incorrectly han…
first Apr 17, 2025 -
High max 7.2USN-7441-1 2 CVEs
mosquitto vulnerabilities
It was discovered that Eclipse Mosquitto client incorrectly handled memory when receiving a SUBACK packet. An attacker with a malicious broker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2024-10525) Xiangpu Song …
first Apr 16, 2025 -
Medium max 4.0USN-7426-2 2 CVEs
poppler vulnerabilities
USN-7426-1 fixed several vulnerabilities in poppler. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that poppler incorrectly handled memory when opening certain PDF files. …
first Apr 9, 2025 -
Medium max 4.2USN-7419-1 2 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory when using invalid input with the log option. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2025-1215) It was disc…
first Apr 7, 2025 -
UnscoredUSN-7416-1 3 CVEs
kamailio vulnerabilities
Stelios Tsampas discovered that Kamailio did not correctly handle certain memory operations, which could lead to a buffer overflow. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affecte…
first Apr 7, 2025 -
UnscoredUSN-7412-3 0 CVEs
gnupg2 vulnerability
USN-7412-1 fixed a vulnerability in GnuPG. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that GnuPG incorrectly handled importing keys with certain crafted subkey data. If…
first Dec 9, 2025 -
Critical max 9.3USN-7409-1 3 CVEs
ruby-saml vulnerabilities
It was discovered that ruby-saml did not correctly handle XML parsing. An attacker could possibly use this issue to perform a signature wrapping attack and bypass authentication. (CVE-2025-25291 and CVE-2025-25292) It was discovered that ruby-saml did not cor…
first Apr 2, 2025 -
UnscoredUSN-7405-1 3 CVEs
inspircd vulnerabilities
It was discovered that InspIRCd did not correctly handle certificate fingerprints, which could lead to spoofing. A remote attacker could possibly use this issue to bypass authentication. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-7142) It was discov…
first Apr 2, 2025 -
High max 7.5USN-7404-1 4 CVEs
phpseclib vulnerabilities
It was discovered that phpseclib did not correctly handle RSA PKCS#1 v1.5 signature verification. An attacker could possibly use this issue to bypass authentication. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-30130) It was discovered that phpseclib …
first Apr 2, 2025 -
Medium max 6.5USN-7398-1 4 CVEs
libtar vulnerabilities
It was discovered that libtar may perform out-of-bounds reads when processing specially crafted tar files. An attacker could possibly use this issue to cause libtar to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2021-33643, CVE-20…
first Mar 31, 2025 -
Critical max 9.1USN-7394-1 2 CVEs
ruby-doorkeeper vulnerabilities
Jonathan Clem and Justin Bull discovered that Doorkeeper could allow arbitrary token revocation and replay attacks. An attacker could possibly use this issue to gain unauthorized access to a system. (CVE-2016-6582) It was discovered that Doorkeeper incorrectl…
first Mar 31, 2025 -
Critical max 9.8USN-7375-1 4 CVEs
org-mode vulnerabilities
It was discovered that Org Mode did not correctly handle filenames containing shell metacharacters. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-28617) I…
first Mar 27, 2025 -
Medium max 4.6USN-7374-1 1 CVE
containerd vulnerability
Benjamin Koltermann discovered that containerd incorrectly handled large user id values. This could result in containers possibly being run as root, contrary to expectations.
first Mar 26, 2025 -
High max 7.5USN-7368-1 1 CVE
snakeyaml vulnerability
It was discovered that SnakeYAML incorrectly handled recursive entity references. An attacker could possibly use this issue to cause SnakeYAML to crash, resulting in a denial of service.
first Mar 27, 2025 -
High max 7.3USN-7367-1 5 CVEs
zvbi vulnerabilities
It was discovered that zvbi incorrectly handled memory when processing user input. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Mar 24, 2025 -
High max 7.5USN-7366-1 3 CVEs
ruby-rack vulnerabilities
Nhật Thái Đỗ discovered that Rack incorrectly handled certain usernames. A remote attacker could possibly use this issue to perform CRLF injection. (CVE-2025-25184) Phạm Quang Minh discovered that Rack incorrectly handled certain headers. A remote attacker co…
first Mar 24, 2025 -
High max 8.6USN-7356-1 2 CVEs
uriparser vulnerabilities
It was discovered that uriparser did not correctly handle certain inputs, which could lead to an integer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-34402, CVE-2024-34403)
first Mar 19, 2025 -
Critical max 9.3USN-7353-1 1 CVE
plantuml vulnerability
Tobias S. Fink discovered that PlantUML was susceptible to cross-site scripting attacks (XSS) in instances where SVG images were rendered. An attacker could possibly use this issue to cause PlantUML to crash, resulting in a denial of service, or the execution…
first Mar 17, 2025 -
High max 8.1
freetype vulnerabilities
USN-7352-1 fixed a vulnerability in FreeType. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This update also fixes an additional vulnerability in Ubuntu 14.04 LTS. Original advisory details: It was discovered that F…
first Mar 17, 2025 -
High max 7.8USN-7299-4 8 CVEs
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 regression
USN-7299-2 fix vulnerabilities in X.Org X Server. This fix caused a regression in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This update fix the regression and re-apply the fix for the CVE listed. We apologize for the inconvenience. Original advisory details: Jan…
first Mar 17, 2025 -
UnscoredUSN-7299-3 0 CVEs
xorg-server, xwayland regression
USN-7299-2 fix vulnerabilities in X.Org X Server. This fix caused regression in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This update reverts it pending further investigation. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrec…
first Mar 12, 2025 -
High max 7.8USN-7299-2 8 CVEs
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerabilities
USN-7299-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain memory operat…
first Mar 10, 2025 -
UnscoredUSN-7298-1 1 CVE
linux, linux-lts-xenial vulnerability
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or pos…
first Feb 25, 2025 -
UnscoredUSN-7296-1 1 CVE
linux, linux-hwe vulnerability
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or pos…
first Feb 25, 2025 -
Medium max 6.6USN-7290-1 4 CVEs
rails vulnerabilities
It was discovered that Rails did not correctly handle parsing block formats in email service layers. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-47889) It was discovered that Rails did not correctly handle parsing block q…
first Feb 25, 2025 -
Medium max 5.5USN-7284-1 2 CVEs
netty vulnerabilities
Jonathan Leitschuh discovered that Netty did not correctly handle file permissions when writing temporary files. An attacker could possibly use this issue to leak sensitive information. (CVE-2022-24823) It was discovered that Netty did not correctly handle li…
first Feb 24, 2025 -
High max 7.2
lucene-solr vulnerability
It was discovered that the Apache Solr DataImportHandler module incorrectly handled certain request parameters in a default configuration. A remote attacker could possibly use this issue to execute arbitrary code.
first Feb 21, 2025 -
High max 8.1
tomcat7 vulnerabilities
It was discovered that Tomcat incorrectly handled being configured with HTTP PUTs enabled. A remote attacker could use this issue to upload a JSP file to the server and execute arbitrary code.
first Feb 21, 2025 -
Medium max 6.3USN-7280-2 1 CVE
python vulnerability
USN-7280-1 fixed a vulnerability in Python. This update provides the corresponding updates for some additional Python packages in Ubuntu releases. Original advisory details: It was discovered that Python incorrectly handled parsing domain names that included …
first May 22, 2025 -
Medium max 6.8USN-7270-2 1 CVE
openssh vulnerability
USN-7270-1 fixed a vulnerability in OpenSSH. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that the OpenSSH client incorrectly handled the non-default VerifyHostKeyDNS opt…
first Feb 18, 2025 -
Medium max 6.5USN-7269-1 3 CVEs
intel-microcode vulnerabilities
Ke Sun, Paul Grosen and Alyssa Milburn discovered that some Intel® Processors did not properly implement Finite State Machines (FSMs) in Hardware Logic. A local privileged attacker could use this issue to cause a denial of service. (CVE-2024-31068) It was dis…
first Feb 17, 2025 -
Medium max 5.3USN-7267-1 1 CVE
libsndfile vulnerability
It was discovered that libsndfile incorrectly handled certain malformed OggVorbis files. An attacker could possibly use this issue to cause libsndfile to crash, resulting in a denial of service.
first Feb 13, 2025 -
High max 7.8USN-7266-1 9 CVEs
digikam vulnerabilities
Zinuo Han and Ao Wang discovered that the Android DNG SDK, vendored in digiKam, did not correctly parse certain files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu …
first Feb 13, 2025 -
High max 8.8USN-7265-1 2 CVEs
bluez vulnerabilities
Julian Rauchberger discovered that BlueZ did not correctly handle certain memory operations. An attacker could possibly use this issue to leak sensitive information or execute arbitrary code. (CVE-2019-8921, CVE-2019-8922)
first Feb 12, 2025