8,437 results · Feed
-
Critical max 9.1USN-5905-1 5 CVEs
php7.0 vulnerabilities
It was discovered that PHP incorrectly handled certain gzip files. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-31628) It was discovered that PHP incorrectly handled certain cookies. An attacker could possibly use this iss…
first Mar 2, 2023 -
Medium max 5.3USN-5898-1 2 CVEs
openjdk-8 vulnerabilities
It was discovered that the Serialization component of OpenJDK did not properly handle the deserialization of some CORBA objects. An attacker could possibly use this to bypass Java sandbox restrictions. (CVE-2023-21830) Markus Loewe discovered that the Java So…
first Feb 28, 2023 -
UnscoredUSN-5895-1 10 CVEs
mplayer vulnerabilities
It was discovered that MPlayer could be made to divide by zero when processing certain malformed media files. If a user were tricked into opening a specially crafted media file, an attacker could possibly use this issue to cause MPlayer to crash, resulting in…
first Feb 27, 2023 -
Medium max 6.1USN-5899-1 1 CVE
awstats vulnerability
It was discovered that AWStats did not properly sanitize the content of whois responses in the hostinfo plugin. An attacker could possibly use this issue to conduct cross-site scripting (XSS) attacks.
first Feb 28, 2023 -
UnscoredUSN-5889-1 13 CVEs
zoneminder vulnerabilities
It was discovered that ZoneMinder was not properly sanitizing URL parameters for certain views. An attacker could possibly use this issue to perform a cross-site scripting (XSS) attack. This issue was only fixed in Ubuntu 16.04 ESM. (CVE-2019-6777) It was dis…
first Feb 27, 2023 -
High max 7.5USN-5886-1 4 CVEs
intel-microcode vulnerabilities
Erik C. Bjorge discovered that some Intel(R) Atom and Intel Xeon Scalable Processors did not properly implement access controls for out-of-band management. This may allow a privileged network-adjacent user to potentially escalate privileges. (CVE-2022-21216) …
first Feb 27, 2023 -
Critical max 9.1USN-7340-1 2 CVEs
openvpn vulnerabilities
It was discovered that OpenVPN did not perform proper input validation when generating a TLS key under certain configuration, which could lead to a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary co…
first Mar 11, 2025 -
UnscoredUSN-7330-2 0 CVEs
ansible regression
USN-7330-1 fixed vulnerabilities in Ansible. The update introduced a regression when attempting to install Ansible on Ubuntu 16.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Ansibl…
first Mar 28, 2025 -
High max 7.8USN-7330-1 8 CVEs
ansible vulnerabilities
It was discovered that Ansible did not properly verify certain fields of X.509 certificates. An attacker could possibly use this issue to spoof SSL servers if they were able to intercept network communications. This issue only affected Ubuntu 14.04 LTS. (CVE-…
first Mar 5, 2025 -
Medium max 4.4USN-7320-1 3 CVEs
gpac vulnerabilities
It was discovered that the GPAC MP4Box utility incorrectly handled certain AC3 files, which could lead to an out-of-bounds read. A remote attacker could use this issue to cause MP4Box to crash, resulting in a denial of service (system crash). This issue only …
first Mar 4, 2025 -
Critical max 10.0USN-7309-1 3 CVEs
Ruby SAML vulnerabilities
It was discovered that Ruby SAML did not properly validate SAML responses. An unauthenticated attacker could use this vulnerability to log in as an abitrary user. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-5697) It was discovered that Ruby SAML inco…
first Feb 28, 2025 -
High max 8.1USN-7302-1 5 CVEs
libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain memory operations. A remote attacker could use this issue to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ub…
first Feb 25, 2025 -
Medium max 6.2USN-5871-1 2 CVEs
git vulnerabilities
It was discovered that Git incorrectly handled certain repositories. An attacker could use this issue to make Git uses its local clone optimization even when using a non-local transport. (CVE-2023-22490) Joern Schneeweisz discovered that Git incorrectly handl…
first Feb 14, 2023 -
High max 7.0USN-7321-1 3 CVEs
redis vulnerabilities
It was discovered that Redis incorrectly handled certain memory operations during pattern matching. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-31228) It was discovered that Redis incorrectly handled certain specially cra…
first Mar 5, 2025 -
High max 8.3USN-5866-1 5 CVEs
nova vulnerabilities
It was discovered that Nova did not properly manage data logged into the log file. An attacker with read access to the service's logs could exploit this issue and may obtain sensitive information. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS…
first Feb 13, 2023 -
High max 7.8USN-5842-1 1 CVE
editorconfig-core vulnerability
Mark Esler and David Fernandez Gonzalez discovered that EditorConfig Core C incorrectly handled memory when handling certain inputs. An attacker could possibly use this issue to cause applications using EditorConfig Core C to crash, resulting in a denial of s…
first Feb 6, 2023 -
Medium max 5.3USN-5839-2 1 CVE
apache2 vulnerability
USN-5839-1 fixed a vulnerability in Apache. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Dimas Fariski Setyawan Putra discovered that the Apache HTTP Server mod_proxy module incorrectly truncated certain respo…
first Feb 2, 2023 -
UnscoredUSN-5838-1 7 CVEs
advancecomp vulnerabilities
It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on MNG file. If a user were tricked into opening a specially crafted MNG file, a remote attacker could possibly use this issue to cause AdvanceCOMP to crash, re…
first Feb 1, 2023 -
High max 7.5USN-5837-2 1 CVE
python-django vulnerability
USN-5837-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Nick Pope discovered that Django incorrectly handled certain Accept-Language headers. A remote attacker could possibly u…
first Feb 1, 2023 -
Critical max 9.0USN-5834-1 2 CVEs
apache2 vulnerabilities
It was discovered that the Apache HTTP Server mod_dav module did not properly handle specially crafted request headers. A remote attacker could possibly use this issue to cause the process to crash, leading to a denial of service. (CVE-2006-20001) It was disc…
first Jan 31, 2023 -
High max 7.5USN-5833-1 1 CVE
python-future vulnerability
Sebastian Chnelik discovered that python-future incorrectly handled certain HTTP header field. An attacker could possibly use this issue to cause a denial of service.
first Jan 31, 2023 -
Medium max 4.9USN-5823-2 1 CVE
mysql-5.7 vulnerability
USN-5823-1 fixed a vulnerability in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issue…
first Jan 24, 2023 -
High max 7.5USN-5821-2 1 CVE
wheel vulnerability
USN-5821-1 fixed a vulnerability in wheel. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Sebastian Chnelik discovered that wheel incorrectly handled certain file names when validated against a regex expression.…
first Jan 24, 2023 -
High max 7.8USN-5820-1 1 CVE
exuberant-ctags vulnerability
Lorenz Hipp discovered a flaw in exuberant-ctags handling of the tag filename command-line argument. A crafted tag filename specified in the command line or in the configuration file could result in arbitrary command execution.
first Jan 24, 2023 -
High max 7.8USN-5811-2 1 CVE
sudo vulnerability
USN-5811-1 fixed a vulnerability in Sudo. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly handled user-specified editors when using the sudoed…
first Jan 18, 2023 -
Critical max 9.8USN-5810-3 2 CVEs
git vulnerabilities
USN-5810-1 fixed several vulnerabilities in Git. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Markus Vervier and Eric Sesterhenn discovered that Git incorrectly handled certain gitattributes. An attacker could…
first Feb 7, 2023 -
High max 8.8USN-5807-2 3 CVEs
libxpm vulnerabilities
USN-5807-1 fixed vulnerabilities in libXpm. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Martin Ettl discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked in…
first Feb 21, 2023 -
High max 8.8USN-5806-1 1 CVE
ruby2.3 vulnerability
Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications which generate HTTP responses using cgi gem. An attacker could possibly use this issue to maliciously modify the response a user would receive from a vulnerable …
first Jan 17, 2023 -
UnscoredUSN-6587-4 0 CVEs
xorg-server, xwayland regression
USN-6587-1 fixed vulnerabilities in X.Org X Server. The fix was incomplete resulting in a possible regression. This update fixes the problem. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled memory when process…
first Feb 1, 2024 -
Critical max 9.8USN-6587-2 6 CVEs
xorg-server vulnerabilities
USN-6587-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled memory when processin…
first Jan 22, 2024 -
Medium max 6.1USN-6473-2 3 CVEs
python-pip vulnerabilities
USN-6473-1 fixed vulnerabilities in urllib3. This update provides the corresponding updates for the urllib3 module bundled into pip. Original advisory details: It was discovered that urllib3 didn't strip HTTP Authorization header on cross-origin redirects. A …
first Nov 15, 2023 -
High max 7.5USN-5785-1 3 CVEs
freeradius vulnerabilities
It was discovered that FreeRADIUS incorrectly handled multiple EAP-pwd handshakes. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-17185) Shane Guan discovered that FreeRADIUS incorr…
first Jan 4, 2023 -
High max 7.8USN-5781-1 1 CVE
emacs24 vulnerability
It was discovered that Emacs did not properly manage certain inputs. An attacker could possibly use this issue to execute arbitrary commands.
first Dec 14, 2022 -
High max 7.8USN-5775-1 6 CVEs
vim vulnerabilities
It was discovered that Vim uses freed memory in recurisve substitution of specially crafted patterns. An attacker could possbly use this to crash Vim and cause denial of service. (CVE-2022-2345) It was discovered that Vim makes illegal memory calls when patte…
first Dec 12, 2022 -
UnscoredUSN-5771-1 0 CVEs
squid3 regression
USN-3557-1 fixed vulnerabilities in Squid. This update introduced a regression which could cause the cache log to be filled with many Vary loop messages. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Mathias Fis…
first Dec 12, 2022 -
UnscoredUSN-5770-1 1 CVE
gcc-5, gccgo-6 vulnerability
Todd Eisenberger discovered that certain versions of GNU Compiler Collection (GCC) could be made to clobber the status flag of RDRAND and RDSEED with specially crafted input. This could potentially lead to less randomness in random number generation.
first Dec 8, 2022 -
High max 8.8USN-5769-1 2 CVEs
protobuf vulnerabilities
It was discovered that protobuf did not properly manage memory when serializing large messages. An attacker could possibly use this issue to cause applications using protobuf to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE…
first Dec 8, 2022 -
Medium max 5.9USN-5768-1 4 CVEs
glibc vulnerabilities
Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could possibly use this issue to cause the GNU C Library to hang or crash, resulting in a denial of service. (CV…
first Dec 8, 2022 -
UnscoredUSN-5765-1 1 CVE
postgresql-9.5 vulnerability
Jacob Champion discovered that PostgreSQL incorrectly handled SSL certificate verification and encryption. A remote attacker could possibly use this issue to inject arbitrary SQL queries when a connection is first established.
first Dec 7, 2022 -
UnscoredUSN-5762-1 1 CVE
binutils vulnerability
It was discovered that GNU binutils incorrectly handled certain COFF files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first Dec 5, 2022