8,437 results · Feed
-
High max 7.5USN-6055-1 2 CVEs
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
It was discovered that Ruby incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-28755) It was discovered that Ruby incorrectly handled certain regular expressions. An attacker coul…
first May 4, 2023 -
High max 7.7USN-6053-1 1 CVE
php7.0 vulnerability
It was discovered that PHP incorrectly handled certain invalid Blowfish password hashes. An invalid password hash could possibly allow applications to accept any password as valid, contrary to expectations.
first May 2, 2023 -
High max 7.5USN-6050-2 2 CVEs
git vulnerabilities
USN-6050-1 fixed several vulnerabilities in Git. This update provides the corresponding updates for CVE-2023-25652 and CVE-2023-29007 on Ubuntu 16.04 LTS. Original advisory details: It was discovered that Git incorrectly handled certain commands. An attacker …
first May 17, 2023 -
High max 7.5USN-6049-1 9 CVEs
netty vulnerabilities
It was discovered that Netty's Zlib decoders did not limit memory allocations. A remote attacker could possibly use this issue to cause Netty to exhaust memory via malicious input, leading to a denial of service. This issue only affected Ubuntu 16.04 ESM and …
first Apr 28, 2023 -
UnscoredUSN-6046-1 0 CVEs
openssl-ibmca vulnerabilities
It was discovered that OpenSSL-ibmca incorrectly handled certain RSA decryption. An attacker could possibly use this issue to expose sensitive information.
first Apr 27, 2023 -
Medium max 5.5USN-6042-1 1 CVE
cloud-init vulnerability
James Golovich discovered that sensitive data could be exposed in logs. An attacker could use this information to find hashed passwords and possibly escalate their privilege.
first Apr 26, 2023 -
Critical max 9.8USN-6038-2 18 CVEs
golang-1.13, golang-1.16 vulnerabilities
USN-6038-1 fixed several vulnerabilities in Go 1.18. This update provides the corresponding updates for Go 1.13 and Go 1.16. CVE-2022-29526 and CVE-2022-30630 only affected Go 1.16. Original advisory details: It was discovered that the Go net/http module inco…
first Jan 9, 2024 -
Medium max 6.5USN-6037-1 1 CVE
Apache Commons Net vulnerability
ZeddYu Lu discovered that the FTP client from Apache Commons Net trusted the host from PASV responses by default. A remote attacker with a malicious FTP server could redirect the client to another server, which could possibly result in leaked information abou…
first Apr 28, 2023 -
UnscoredUSN-6035-1 1 CVE
kauth vulnerability
It was discovered that KAuth incorrectly handled some configuration parameters with specially crafted arbitrary types. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code.
first Apr 20, 2023 -
Critical max 9.8USN-6022-1 2 CVEs
kamailio vulnerabilities
It was discovered that Kamailio did not properly sanitize SIP messages under certain circumstances. An attacker could use this vulnerability to cause a denial of service or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 ESM and 18.04 E…
first Apr 14, 2023 -
Critical max 9.8USN-6017-1 1 CVE
ghostscript vulnerability
Hadrien Perrineau discovered that Ghostscript incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code.
first Apr 13, 2023 -
UnscoredUSN-6005-2 2 CVEs
sudo vulnerabilities
USN-6005-1 fixed vulnerabilities in Sudo. This update provides the corresponding updates for Ubuntu 16.04 LTS. Original advisory details: Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly escaped control characters in log messages and sudo…
first May 29, 2023 -
High max 7.8USN-6003-1 1 CVE
emacs24 vulnerability
Xi Lu discovered that Emacs did not properly handle certain inputs. An attacker could possibly use this issue to execute arbitrary commands.
first Apr 6, 2023 -
Medium max 5.4USN-7343-1 3 CVEs
jinja2 vulnerabilities
Rafal Krupinski discovered that Jinja2 did not properly restrict the execution of code in situations where templates are used maliciously. An attacker with control over a template's filename and content could potentially use this issue to enable the execution…
first Mar 11, 2025 -
UnscoredUSN-6519-2 0 CVEs
ec2-hibinit-agent update
USN-6519-1 added IMDSv2 support to EC2 hibagent. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: The EC2 hibagent package has been updated to add IMDSv2 support, as IMDSv1 uses an insecure protocol and is no long…
first Nov 29, 2023 -
UnscoredUSN-6518-1 1 CVE
afflib vulnerability
Luis Rocha discovered that AFFLIB incorrectly handled certain input files. If a user or automated system were tricked into processing a specially crafted AFF image file, a remote attacker could possibly use this issue to cause a denial of service via applicat…
first Nov 28, 2023 -
Critical max 9.8USN-5998-1 4 CVEs
apache-log4j1.2 vulnerabilities
It was discovered that the SocketServer component of Apache Log4j 1.2 incorrectly handled deserialization. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 ESM. (CVE-2019-17571) It was discovered that …
first Apr 5, 2023 -
High max 7.7USN-5997-1 1 CVE
ipmitool vulnerability
It was discovered that IPMItool was not properly checking the data received from a remote LAN party. A remote attacker could possibly use this issue to to cause a crash or arbitrary code execution.
first Apr 4, 2023 -
High max 7.5USN-5996-1 3 CVEs
liblouis vulnerabilities
It was discovered that Liblouis incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-26767, CVE-2023-26768, CVE-2023-26769)
first Apr 4, 2023 -
High max 7.5USN-5989-1 1 CVE
glusterfs vulnerability
Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could possibly use this issue to cause a denial of service.
first Mar 30, 2023 -
High max 8.8USN-5988-1 2 CVEs
xcftools vulnerabilities
It was discovered that integer overflows vulnerabilities existed in Xcftools. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-5086, CVE-2019-5087)
first Mar 29, 2023 -
High max 8.7USN-5983-1 1 CVE
php-nette vulnerability
Cyku Hong discovered that Nette was not properly handling and validating data used for code generation. A remote attacker could possibly use this issue to execute arbitrary code.
first Mar 29, 2023 -
Critical max 10.0USN-5973-1 8 CVEs
node-url-parse vulnerabilities
It was discovered that url-parse incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service, or to perform a serve…
first Mar 27, 2023 -
UnscoredUSN-5969-1 3 CVEs
gif2apng vulnerabilities
It was discovered that gif2apng contained multiple heap-base overflows. An attacker could potentially exploit this to cause a denial of service (system crash). (CVE-2021-45909, CVE-2021-45910, CVE-2021-45911)
first Mar 23, 2023 -
UnscoredUSN-5961-1 6 CVEs
abcm2ps vulnerabilities
It was discovered that abcm2ps incorrectly handled memory when parsing specially crafted ABC files. An attacker could use this issue to cause abcm2ps to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu…
first Mar 16, 2023 -
High max 7.5USN-5958-1 4 CVEs
ffmpeg vulnerabilities
It was discovered that FFmpeg could be made to dereference a null pointer. An attacker could possibly use this to cause a denial of service via application crash. These issues only affected Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04…
first Mar 16, 2023 -
High max 8.8USN-5957-1 7 CVEs
librecad vulnerabilities
Cody Sixteen discovered that LibreCAD incorrectly handled memory when parsing DXF files. An attacker could use this issue to cause LibreCAD to crash, leading to a denial of service. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. (CVE-2018-191…
first Mar 15, 2023 -
Medium max 6.1USN-5956-2 1 CVE
libphp-phpmailer vulnerability
USN-5956-1 fixed vulnerabilities in PHPMailer. It was discovered that the fix for CVE-2017-11503 was incomplete. This update fixes the problem. Original advisory details: Dawid Golunski discovered that PHPMailer was not properly escaping user input data used …
first Mar 15, 2023 -
Critical max 9.8
libphp-phpmailer vulnerabilities
Dawid Golunski discovered that PHPMailer was not properly escaping user input data used as arguments to functions executed by the system shell. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 ESM. (CV…
first Mar 15, 2023 -
High max 7.8USN-5955-1 1 CVE
emacs24 vulnerability
It was discovered that Emacs did not properly manage certain files when using htmlfontify functionality. A local attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary commands.
first Mar 15, 2023 -
UnscoredUSN-5952-1 10 CVEs
openjpeg2 vulnerabilities
Sebastian Poeplau discovered that OpenJPEG incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service or execute a…
first Mar 15, 2023 -
High max 7.5USN-5948-1 2 CVEs
python-werkzeug vulnerabilities
It was discovered that Werkzeug did not properly handle the parsing of nameless cookies. A remote attacker could possibly use this issue to shadow other cookies. (CVE-2023-23934) It was discovered that Werkzeug could be made to process unlimited number of mul…
first Mar 13, 2023 -
Critical max 9.8USN-5942-2 1 CVE
apache2 vulnerability
USN-5942-1 fixed vulnerabilities in Apache HTTP Server. This update provides the corresponding update for CVE-2023-25690 for Ubuntu 16.04 ESM. Original advisory details: Lars Krapf discovered that the Apache HTTP Server mod_proxy module incorrectly handled ce…
first Mar 22, 2023 -
High max 7.8USN-5937-1 1 CVE
opusfile vulnerability
It was discovered that Opusfile was not properly validating pointer arguments in some of its functions, which could lead to a NULL pointer dereference. An attacker could possibly use this issue to cause a denial of service or have other unspecified impacts.
first Mar 8, 2023 -
High max 8.8USN-5947-1 3 CVEs
php-twig, twig vulnerabilities
Fabien Potencier discovered that Twig was not properly enforcing sandbox policies when dealing with objects automatically cast to strings by PHP. An attacker could possibly use this issue to expose sensitive information. This issue was only fixed in Ubuntu 16…
first Mar 13, 2023 -
UnscoredUSN-7422-1 8 CVEs
fis-gtm vulnerabilities
It was discovered that FIS-GT.M could incorrectly dereference memory in certain instances. An attacker could possibly use this issue to cause FIS-GT.M to crash, resulting in a denial of service. (CVE-2021-44492, CVE-2021-44498, CVE-2021-44508) It was discover…
first Apr 7, 2025 -
UnscoredUSN-6584-1 3 CVEs
libspf2 vulnerabilities
Philipp Jeitner and Haya Shulman discovered that Libspf2 incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of servic…
first Jan 15, 2024 -
Medium max 4.9USN-6583-1 2 CVEs
mysql-5.7 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.7.44 in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. In addition to security fixes, the updated packages contain …
first Jan 15, 2024 -
Critical max 9.8USN-5932-1 5 CVEs
sofia-sip vulnerabilities
It was discovered that Sofia-SIP incorrectly handled specially crafted SDP packets. A remote attacker could use this issue to cause applications using Sofia-SIP to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only affe…
first Mar 7, 2023 -
UnscoredUSN-5922-1 3 CVEs
fribidi vulnerabilities
It was discovered that FriBidi incorrectly handled the processing of input strings, resulting in memory corruption. An attacker could possibly use this issue to cause FriBidi to crash, resulting in a denial of service, or potentially execute arbitrary code. (…
first Mar 6, 2023