8,437 results · Feed
-
UnscoredUSN-6770-1 0 CVEs
fossil regression
USN-6729-1 fixed vulnerabilities in Apache HTTP Server. The update lead to the discovery of a regression in Fossil with regards to the handling of POST requests that do not have a Content-Length field set. This update fixes the problem. We apologize for the i…
first May 9, 2024 -
Low max 3.3USN-6764-1 1 CVE
libde265 vulnerability
It was discovered that libde265 could be made to allocate memory that exceeds the maximum supported size. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service.
first May 7, 2024 -
Medium max 5.3USN-6761-1 1 CVE
anope vulnerability
It was discovered that Anope did not properly process credentials for suspended accounts. An attacker could possibly use this issue to normally login to the platform as a suspended user after changing their password.
first Apr 30, 2024 -
Medium max 6.5USN-6757-1 3 CVEs
php7.0, php7.2, php7.4, php8.1 vulnerabilities
It was discovered that PHP incorrectly handled PHP_CLI_SERVER_WORKERS variable. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-4900) It was disco…
first Apr 29, 2024 -
High max 7.5
nghttp2 vulnerabilities
It was discovered that nghttp2 incorrectly handled the HTTP/2 implementation. A remote attacker could possibly use this issue to cause nghttp2 to consume resources, leading to a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS…
first Apr 25, 2024 -
Critical max 9.1USN-6753-1 1 CVE
cryptojs vulnerability
Thomas Neil James Shadwell discovered that CryptoJS was using an insecure cryptographic default configuration. A remote attacker could possibly use this issue to expose sensitive information.
first Apr 25, 2024 -
UnscoredUSN-6745-1 1 CVE
percona-xtrabackup vulnerability
It was discovered that in Percona XtraBackup, a local crafted filename could trigger arbitrary code execution.
first Apr 22, 2024 -
Medium max 5.9USN-6738-1 1 CVE
lxd vulnerability
Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that LXD incorrectly handled the handshake phase and the use of sequence numbers in SSH Binary Packet Protocol (BPP). If a user or an automated system were tricked into opening a specially crafted i…
first Apr 22, 2024 -
High max 7.5USN-6731-1 3 CVEs
yard vulnerabilities
It was discovered that YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-17042) It was di…
first Apr 15, 2024 -
High max 7.5USN-6729-2 3 CVEs
apache2 vulnerabilities
USN-6729-1 fixed several vulnerabilities in Apache. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Orange Tsai discovered that the Apache HTTP Server incorrectly handled validating certain i…
first Apr 17, 2024 -
High max 8.6USN-6718-2 1 CVE
curl vulnerability
USN-6718-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that curl incorrectly handled memory when limiting the amount of headers when HTTP/…
first Mar 27, 2024 -
High max 7.8USN-6715-1 1 CVE
unixodbc vulnerability
It was discovered that unixODBC incorrectly handled certain bytes. An attacker could use this issue to execute arbitrary code or cause a crash.
first Mar 27, 2024 -
High max 7.7USN-6692-1 1 CVE
libgoogle-gson-java vulnerability
It was discovered that Gson incorrectly handled deserialization of untrusted input data. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
first Mar 12, 2024 -
High max 7.5USN-6685-1 1 CVE
mqtt-client vulnerability
It was discovered that mqtt-client incorrectly handled memory while parsing malformed MQTT frames. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 7, 2024 -
High max 8.6USN-6678-1 4 CVEs
libgit2 vulnerabilities
It was discovered that libgit2 mishandled equivalent filenames on NTFS partitions. If a user or automated system were tricked into cloning a specially crafted repository, an attacker could possibly use this issue to execute arbitrary code. This issue only aff…
first Mar 5, 2024 -
High max 8.8USN-6677-1 7 CVEs
libde265 vulnerabilities
It was discovered that libde265 could be made to dereference invalid memory. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubu…
first Mar 5, 2024 -
Medium max 4.4USN-6676-1 1 CVE
c-ares vulnerability
Vojtěch Vobr discovered that c-ares incorrectly handled user input from local configuration files. An attacker could possibly use this issue to cause a denial of service via application crash.
first Mar 6, 2024 -
UnscoredUSN-6663-2 0 CVEs
openssl update
USN-6663-1 provided a security update for OpenSSL. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: As a security improvement, this update prevents OpenSSL from returning an error when detecting wrong padding in P…
first Mar 13, 2024 -
High max 7.8USN-6659-1 13 CVEs
libde265 vulnerabilities
It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022…
first Feb 26, 2024 -
High max 7.5USN-6657-2 3 CVEs
dnsmasq vulnerabilities
USN-6657-1 fixed several vulnerabilities in Dnsmasq. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Elias Heftrig, Haya Schulmann, Niklas Vogel, and Michael Waidner discovered that Dnsmasq i…
first Apr 24, 2024 -
High max 8.0USN-6656-2 1 CVE
postgresql-9.5 vulnerability
USN-6656-1 fixed several vulnerabilities in PostgreSQL. This update provides the corresponding updates for Ubuntu 16.04 LTS Original advisory details: It was discovered that PostgreSQL incorrectly handled dropping privileges when handling REFRESH MATERIALIZED…
first Mar 12, 2024 -
Medium max 6.1
roundcube vulnerability
It was discovered that Roundcube Webmail incorrectly sanitized characters in the linkrefs text messages. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. (CVE-2023-43770)
first Feb 26, 2024 -
Medium max 6.5USN-6641-1 1 CVE
curl vulnerability
Harry Sintonen discovered that curl incorrectly handled mixed case cookie domains. A remote attacker could possibly use this issue to set cookies that get sent to different and unrelated sites and domains.
first Feb 19, 2024 -
Medium max 5.5USN-6632-1 2 CVEs
openssl vulnerabilities
David Benjamin discovered that OpenSSL incorrectly handled excessively long X9.42 DH keys. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, leading to a denial of service. (CVE-2023-5678) Bahaa Naamneh discovered that Ope…
first Feb 13, 2024 -
High max 7.5USN-6629-1 3 CVEs
ujson vulnerabilities
It was discovered that UltraJSON incorrectly handled certain input with a large amount of indentation. An attacker could possibly use this issue to crash the program, resulting in a denial of service. (CVE-2021-45958) Jake Miller discovered that UltraJSON inc…
first Feb 14, 2024 -
High max 7.4USN-6627-1 18 CVEs
libde265 vulnerabilities
It was discovered that libde265 could be made to read out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. (CVE-2021-35452, CVE-2021-36411, CVE…
first Feb 8, 2024 -
UnscoredUSN-6617-1 14 CVEs
libde265 vulnerabilities
It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issu…
first Jan 30, 2024 -
UnscoredUSN-6612-1 1 CVE
tinyxml vulnerability
It was discovered that TinyXML incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted XML file, a remote attacker could possibly use this issue to cause a denial of service.
first Jan 29, 2024 -
UnscoredUSN-6611-1 1 CVE
exim4 vulnerability
It was discovered that Exim incorrectly handled certain requests. A remote attacker could possibly use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism.
first Jan 29, 2024 -
Medium max 5.0USN-7423-2 3 CVEs
binutils vulnerabilities
USN-7423-1 fixed several vulnerabilities in GNU. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that GNU binutils incorrectly handled certain inputs. An attacker could poss…
first Apr 29, 2025 -
High max 7.5USN-6673-2 1 CVE
python-cryptography vulnerability
USN-6673-1 provided a security update for python-cryptography. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: Hubert Kario discovered that python-cryptography incorrectly handled errors returned by the OpenSSL A…
first Mar 14, 2024 -
High max 7.8USN-6664-1 1 CVE
less vulnerability
It was discovered that less incorrectly handled certain file names. An attacker could possibly use this issue to cause a crash or execute arbitrary commands.
first Feb 27, 2024 -
High max 8.1USN-6596-1 1 CVE
libapache-session-ldap-perl vulnerability
It was discovered that Apache::Session::LDAP incorrectly handled invalid X.509 certificates. If a user or an automated system were tricked into opening a specially crafted invalid X.509 certificate, a remote attacker could possibly use this issue to perform s…
first Jan 24, 2024 -
Medium max 4.8USN-6592-2 2 CVEs
libssh vulnerabilities
USN-6592-1 fixed vulnerabilities in libssh. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that libssh incorrectly handled the ProxyCommand and the ProxyJump features. A r…
first Feb 5, 2024 -
Medium max 6.5USN-6560-3 1 CVE
openssh vulnerability
USN-6560-2 fixed a vulnerability in OpenSSH. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: It was discovered that OpenSSH incorrectly handled user names or host names with shell metacharacters. An attacker coul…
first Sep 16, 2024 -
Medium max 6.5USN-6560-2 2 CVEs
openssh vulnerabilities
USN-6560-1 fixed several vulnerabilities in OpenSSH. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk discovered that the SSH protocol was vulnera…
first Jan 11, 2024 -
High max 8.8
libvpx vulnerabilities
USN-6403-1 fixed several vulnerabilities in libvpx. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: It was discovered that libvpx did not properly handle certain malformed media files. If an application using lib…
first Nov 1, 2023 -
Critical max 9.8USN-6402-1 1 CVE
libtommath vulnerability
It was discovered that LibTomMath incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code and cause a denial of service (DoS).
first Oct 2, 2023 -
UnscoredUSN-6400-1 1 CVE
python2.7, python3.5 vulnerability
It was discovered that Python did not properly provide constant-time processing for a crypto operation. An attacker could possibly use this issue to perform a timing attack and recover sensitive information.
first Sep 27, 2023 -
Critical max 9.8USN-6398-1 2 CVEs
minidlna vulnerabilities
It was discovered that ReadyMedia was vulnerable to DNS rebinding attacks. A remote attacker could possibly use this issue to trick the local DLNA server to leak information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ub…
first Sep 27, 2023