8,437 results · Feed
-
UnscoredUSN-6244-1 1 CVE
amd64-microcode vulnerability
Tavis Ormandy discovered that some AMD processors did not properly handle speculative execution of certain vector register instructions. A local attacker could use this to expose sensitive information.
first Jul 25, 2023 -
Critical max 10.0USN-6239-1 1 CVE
ecdsautils vulnerability
It was discovered that ECDSA Util did not properly verify certain signature values. An attacker could possibly use this issue to bypass signature verification.
first Jul 20, 2023 -
Critical max 9.1USN-6236-1 9 CVEs
connman vulnerabilities
It was discovered that ConnMan could be made to write out of bounds. A remote attacker could possibly use this issue to cause ConnMan to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and…
first Jul 19, 2023 -
High max 7.2USN-6230-1 1 CVE
postgresql-9.5 vulnerability
Alexander Lakhin discovered that PostgreSQL incorrectly handled certain CREATE privileges. An authenticated user could possibly use this issue to execute arbitrary code as the bootstrap supervisor.
first Jul 13, 2023 -
High max 7.5USN-6225-1 1 CVE
knot-resolver vulnerability
It was discovered that Knot Resolver did not correctly handle certain client options. A remote attacker could send requests to malicous domains and cause a denial of service.
first Jul 13, 2023 -
Medium max 5.3USN-6219-1 2 CVEs
ruby2.3, ruby2.5, ruby2.7, ruby3.0, ruby3.1 vulnerabilities
It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.10 and Ubuntu 20.04 LTS. (CVE-2023-28755) It was discovered that Ruby incor…
first Jul 12, 2023 -
Medium max 4.2USN-6210-1 1 CVE
ruby-doorkeeper vulnerability
It was discovered that Doorkeeper incorrectly performed authorization checks for public clients that have been previous approved. An attacker could potentially exploit these in order to impersonate another user and obtain sensitive information.
first Jul 7, 2023 -
Medium max 6.2USN-6202-1 2 CVEs
containerd vulnerabilities
David Korczynski and Adam Korczynski discovered that containerd incorrectly processed certain images with large files. An attacker could possibly use this issue to cause containerd to crash, resulting in a denial of service. (CVE-2023-25153) It was discovered…
first Jul 5, 2023 -
UnscoredUSN-6191-1 0 CVEs
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon regression
USN-6081-1, USN-6084-1, USN-6092-1 and USN-6095-1 fixed vulnerabilities in the Linux kernel. Unfortunately, that update introduced a spurious warning in the IPv6 subsystem. This update removes the undesired warning message.
first Jun 29, 2023 -
Medium max 5.3USN-6184-2 1 CVE
cups vulnerability
USN-6184-1 fixed a vulnerability in CUPS. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that CUPS incorrectly handled certain memory operations. An attacker could possibl…
first Jul 17, 2023 -
UnscoredUSN-6182-1 2 CVEs
pngcheck vulnerabilities
It was discovered that pngcheck incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
first Jun 21, 2023 -
High max 7.8USN-6180-1 7 CVEs
vlc vulnerabilities
It was discovered that VLC could be made to read out of bounds when decoding image files. If a user were tricked into opening a crafted image file, a remote attacker could possibly use this issue to cause VLC to crash, leading to a denial of service. This iss…
first Jun 20, 2023 -
Medium max 5.9USN-6179-1 1 CVE
libjettison-java vulnerability
It was discovered that Jettison incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
first Jun 20, 2023 -
High max 7.5USN-6177-1 4 CVEs
libjettison-java vulnerabilities
It was discovered that Jettison incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
first Jun 19, 2023 -
Medium max 6.2USN-6176-1 1 CVE
pypdf2 vulnerability
It was discovered that PyPDF2 incorrectly handled certain PDF files. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to consume system resources, resulting in a denial of service.
first Jun 19, 2023 -
High max 8.8USN-7358-1 4 CVEs
postgresql-9.5 vulnerabilities
Wolfgang Walther discovered that PostgreSQL incorrectly tracked tables with row security. A remote attacker could possibly use this issue to perform forbidden reads and modifications. (CVE-2024-10976) Jacob Champion discovered that PostgreSQL clients used unt…
first Mar 19, 2025 -
High max 7.5USN-7348-1 4 CVEs
python3.5, python3.8 vulnerabilities
It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered “private” or “globally reachable”. This could possibly result in applications applying incorrect security policies. This issue onl…
first Mar 12, 2025 -
Critical max 9.8USN-7347-1 3 CVEs
netatalk vulnerabilities
It was discovered that Netatalk did not properly manage memory under certain circumstances. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2024-38439, CVE-2024-38440, CVE-2024-38441)
first Mar 12, 2025 -
UnscoredUSN-7346-2 0 CVEs
opensc regression
USN-7346-1 fixed vulnerabilities in OpenSC. The update introduced a regression in Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. The security fix has been removed pending further investigation. We apologize for the inconvenience. Original advisory …
first Mar 28, 2025 -
High max 7.1USN-7346-1 13 CVEs
opensc vulnerabilities
It was discovered that OpenSC did not correctly handle certain memory operations, which could lead to a use-after-free vulnerability. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ub…
first Mar 12, 2025 -
High max 7.5USN-6164-2 2 CVEs
c-ares vulnerabilities
USN-6164-1 fixed several vulnerabilities in c-ares. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Hannes Moesl discovered that c-ares incorrectly handled certain ipv6 addresses. An attacker…
first Sep 11, 2023 -
Low max 3.7USN-6142-1 1 CVE
nghttp2 vulnerability
Gal Goldshtein discovered that nghttp2 incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
first Jun 6, 2023 -
Medium max 6.1USN-6159-1 1 CVE
python-tornado vulnerability
It was discovered that Tornado incorrectly handled certain redirect. An remote attacker could possibly use this issue to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.
first Jun 13, 2023 -
Medium max 6.1USN-6155-2 1 CVE
requests vulnerability
USN-6155-1 fixed a vulnerability in Requests. This update provides the corresponding update for Ubuntu 16.04 ESM and 18.04 ESM. Original advisory details: Dennis Brinkrolf and Tobias Funke discovered that Requests incorrectly leaked Proxy-Authorization header…
first Jun 15, 2023 -
High max 7.5USN-6128-2 1 CVE
cups vulnerability
USN-6128-1 fixed a vulnerability in CUPS. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that CUPS incorrectly handled logging. A remote attacker could use this issue to cause CUPS to crash, re…
first Jun 1, 2023 -
Critical max 10.0USN-6125-1 1 CVE
snapd vulnerability
It was discovered that the snap sandbox did not restrict the use of the ioctl system call with a TIOCLINUX request. This could be exploited by a malicious snap to inject commands into the controlling terminal which would then be executed outside of the snap s…
first May 31, 2023 -
UnscoredUSN-6097-1 1 CVE
linuxptp vulnerability
It was discovered that Linux PTP did not properly perform a length check when forwarding a PTP message between ports. A remote attacker could possibly use this issue to access sensitive information, execute arbitrary code, or cause a denial of service.
first May 29, 2023 -
High max 7.0USN-6088-2 6 CVEs
runc vulnerabilities
USN-6088-1 fixed vulnerabilities in runC. This update provides the corresponding updates for Ubuntu 16.04 LTS. It was discovered that runC incorrectly performed access control when mounting /proc to non-directories. An attacker could possibly use this issue t…
first May 23, 2023 -
High max 8.1USN-6082-1 1 CVE
node-eventsource vulnerability
It was discovered that EventSource incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information.
first May 17, 2023 -
Medium max 5.3USN-6078-2 1 CVE
libwebp vulnerability
USN-6078-1 fixed a vulnerability in libwebp. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: Irvan Kurniawan discovered that libwebp incorrectly handled certain memory operations. If a user or automated system we…
first Jul 18, 2023 -
High max 7.4USN-6077-1 7 CVEs
openjdk-8, openjdk-lts, openjdk-17, openjdk-20 vulnerabilities
Ben Smyth discovered that OpenJDK incorrectly handled half-duplex connections during TLS handshake. A remote attacker could possibly use this issue to insert, edit or obtain sensitive information. (CVE-2023-21930) It was discovered that OpenJDK incorrectly ha…
first May 16, 2023 -
High max 7.5USN-6087-1 2 CVEs
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-28755) It was discovered that Ruby incorrectly handled certain regular expressions. An attacker coul…
first May 18, 2023 -
High max 8.8USN-6083-2 1 CVE
cups-filters vulnerability
USN-6083-1 fixed a vulnerability in cups-filters. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: It was discovered that cups-filters incorrectly handled the beh CUPS backend. A remote attacker could possibly use…
first Jun 19, 2023 -
High max 7.5USN-6065-1 2 CVEs
node-css-what vulnerabilities
It was discovered that css-what incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-33587, CVE-2…
first May 10, 2023 -
High max 7.5USN-6060-2 2 CVEs
mysql-5.7 vulnerabilities
USN-6060-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first May 8, 2023 -
High max 7.8USN-6058-1 1 CVE
linux-aws, linux-aws-hwe vulnerability
It was discovered that the Traffic-Control Index (TCINDEX) implementation in the Linux kernel did not properly perform filter deactivation in some situations. A local attacker could possibly use this to gain elevated privileges. Please note that with the fix …
first May 5, 2023 -
Medium max 5.3USN-6055-2 1 CVE
ruby2.3, ruby2.5, ruby2.7 regression
USN-6055-1 fixed a vulnerability in Ruby. Unfortunately it introduced a regression. This update reverts the patches applied to CVE-2023-28755 in order to fix the regression pending further investigation. We apologize for the inconvenience. Original advisory d…
first May 5, 2023 -
UnscoredUSN-6542-1 1 CVE
tinyxml vulnerability
Wang Zhong discovered that TinyXML incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
first Dec 7, 2023 -
High max 7.5USN-6541-1 3 CVEs
glibc vulnerabilities
It was discovered that the GNU C Library was not properly handling certain memory operations. An attacker could possibly use this issue to cause a denial of service (application crash). (CVE-2023-4806, CVE-2023-4813) It was discovered that the GNU C library w…
first Dec 7, 2023 -
UnscoredUSN-6540-1 1 CVE
bluez vulnerability
It was discovered that BlueZ did not properly restrict non-bonded devices from injecting HID events into the input subsystem. This could allow a physically proximate attacker to inject keystrokes and execute arbitrary commands whilst the device is discoverabl…
first Dec 7, 2023