8,437 results · Feed
-
UnscoredUSN-5749-1 1 CVE
libsamplerate vulnerability
Erik de Castro Lopo and Agostino Sarubbo discovered that libsamplerate did not properly perform bounds checking. If a user were tricked into processing a specially crafted audio file, an attacker could possibly use this issue to cause a crash.
first Nov 29, 2022 -
High max 7.8USN-5753-1 1 CVE
snapd vulnerability
The Qualys Research Team discovered that a race condition existed in the snapd snap-confine binary when preparing the private /tmp mount for a snap. A local attacker could possibly use this issue to escalate privileges and execute arbitrary code.
first Dec 1, 2022 -
UnscoredUSN-5751-1 1 CVE
libmaxminddb vulnerability
It was discovered that libmaxminddb incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause applications using libmaxminddb to crash, resulting in a denial of service.
first Nov 30, 2022 -
UnscoredUSN-5750-1 1 CVE
gnutls28 vulnerability
It was discovered that GnuTLS incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service.
first Nov 30, 2022 -
UnscoredUSN-5746-1 1 CVE
harfbuzz vulnerability
Behzad Najjarpour Jabbari discovered that HarfBuzz incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service.
first Nov 28, 2022 -
Medium max 5.2USN-5744-1 1 CVE
libice vulnerability
It was discovered that libICE was using a weak mechanism to generate the session cookies. A local attacker could possibly use this issue to perform a privilege escalation attack.
first Nov 28, 2022 -
Medium max 6.3USN-5743-1 1 CVE
tiff vulnerability
It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute …
first Nov 24, 2022 -
Critical max 9.8USN-6488-2 1 CVE
strongswan vulnerability
USN-6488-1 fixed a vulnerability in strongSwan. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Florian Picca discovered that strongSwan incorrectly handled certain DH public values. A remot…
first Dec 14, 2023 -
High max 8.8USN-6570-1 2 CVEs
postgresql-9.5 vulnerabilities
Pedro Gallegos discovered that PostgreSQL incorrectly handled modifying certain SQL array values. A remote attacker could use this issue to obtain sensitive information, or possibly execute arbitrary code. (CVE-2023-5869) Hemanth Sandrana and Mahendrakar Srin…
first Jan 9, 2024 -
UnscoredUSN-6493-2 0 CVEs
hibagent update
USN-6493-1 fixed a vulnerability in hibagent. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: On Ubuntu 18.04 LTS and Ubuntu 16.04 LTS, the hibagent package has been updated to add IMDSv2 sup…
first Nov 21, 2023 -
High max 8.8USN-6485-1 1 CVE
intel-microcode vulnerability
Benoit Morgan, Paul Grosen, Thais Moreira Hamasaki, Ke Sun, Alyssa Milburn, Hisham Shafi, Nir Shlomovich, Tavis Ormandy, Daniel Moghimi, Josh Eads, Salman Qazi, Alexandra Sandulescu, Andy Nguyen, Eduardo Vela, Doug Kwan, and Kostik Shtoyk discovered that some…
first Nov 17, 2023 -
Low max 2.5USN-6477-1 1 CVE
procps vulnerability
It was discovered that the procps-ng ps tool incorrectly handled memory. An attacker could possibly use this issue to cause procps-ng to crash, resulting in a denial of service.
first Nov 14, 2023 -
Medium max 6.1USN-6473-1 3 CVEs
python-urllib3 vulnerabilities
It was discovered that urllib3 didn't strip HTTP Authorization header on cross-origin redirects. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-25091) …
first Nov 7, 2023 -
High max 7.0USN-5735-1 1 CVE
sysstat vulnerability
It was discovered that Sysstat did not properly check bounds when perfoming certain arithmetic operations on 32 bit systems. An attacker could possibly use this issue to cause a crash or arbitrary code execution.
first Nov 22, 2022 -
UnscoredUSN-5725-2 1 CVE
golang-1.13 vulnerability
USN-5725-1 fixed a vulnerability in Go. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: Diederik Loerakker, Jonny Rhea, Raúl Kripalani, and Preston Van Loon discovered that Go incorrectly handled certain inputs. …
first May 23, 2023 -
High max 7.8USN-5723-1 9 CVEs
vim vulnerabilities
It was discovered that Vim could be made to crash when searching specially crafted patterns. An attacker could possibly use this to crash Vim and cause denial of service. (CVE-2022-1674) It was discovered that there existed a NULL pointer dereference in Vim. …
first Nov 14, 2022 -
UnscoredUSN-5721-1 1 CVE
wavpack vulnerability
It was discovered that WavPack was not properly performing checks when dealing with memory. If a user were tricked into decompressing a specially crafted WavPack Audio File, an attacker could possibly use this issue to cause the WavPack decompressor to crash,…
first Nov 10, 2022 -
UnscoredUSN-5720-1 2 CVEs
libzstd vulnerabilities
It was discovered that Zstandard was not properly managing file permissions when generating output files. A local attacker could possibly use this issue to cause a race condition and gain unauthorized access to sensitive data.
first Nov 9, 2022 -
Medium max 5.3USN-5719-1 6 CVEs
openjdk-8, openjdk-lts, openjdk-17, openjdk-19 vulnerabilities
It was discovered that OpenJDK incorrectly handled long client hostnames. An attacker could possibly use this issue to cause the corruption of sensitive information. (CVE-2022-21619) It was discovered that OpenJDK incorrectly randomized DNS port numbers. A re…
first Nov 9, 2022 -
High max 7.5USN-5712-1 1 CVE
sqlite3 vulnerability
It was discovered that SQLite did not properly handle large string inputs in certain circumstances. An attacker could possibly use this issue to cause a denial of service or arbitrary code execution.
first Nov 3, 2022 -
Critical max 9.1USN-5707-1 1 CVE
libtasn1-6 vulnerability
It was discovered that Libtasn1 did not properly perform bounds checking. An attacker could possibly use this issue to cause a crash.
first Oct 31, 2022 -
High max 7.7USN-5705-1 2 CVEs
tiff vulnerabilities
Chintan Shah discovered that LibTIFF incorrectly handled memory in certain conditions. An attacker could trick a user into processing a specially crafted image file and potentially use this issue to allow for information disclosure or to cause the application…
first Oct 27, 2022 -
Medium max 5.3USN-5701-1 1 CVE
jinja2 vulnerability
Yeting Li discovered that Jinja2 incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service.
first Oct 26, 2022 -
Critical max 9.1USN-5699-1 2 CVEs
glibc vulnerabilities
Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could possibly use this issue to cause the GNU C Library to hang or crash, resulting in a denial of service. (CV…
first Oct 25, 2022 -
Medium max 6.1USN-5698-2 1 CVE
openvswitch vulnerability
USN-5698-1 fixed a vulnerability in Open. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Open vSwitch incorrectly handled comparison of certain minimasks. A remote attacker could use this …
first Oct 25, 2022 -
Medium max 4.9USN-5696-2 4 CVEs
mysql-5.7 vulnerabilities
USN-5696-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first Oct 26, 2022 -
Medium max 5.5USN-5686-4 1 CVE
git vulnerability
USN-5686-1 fixed several vulnerabilities in Git. This update provides the corresponding fix for CVE-2022-39253 on Ubuntu 16.04 ESM. Original advisory details: Cory Snider discovered that Git incorrectly handled certain symbolic links. An attacker could possib…
first Mar 28, 2023 -
High max 8.5USN-5686-2 1 CVE
git vulnerability
USN-5686-1 fixed several vulnerabilities in Git. This update provides the corresponding fix for CVE-2022-39260 on Ubuntu 16.04 ESM. Original advisory details: Kevin Backhouse discovered that Git incorrectly handled certain command strings. An attacker could p…
first Nov 17, 2022 -
UnscoredUSN-5674-1 1 CVE
xmlsec1 vulnerability
It was discovered that XML Security Library incorrectly handled certain input documents. An attacker could possibly use this issue to obtain sensitive information or cause a denial of service.
first Oct 13, 2022 -
High max 7.8USN-6555-2 2 CVEs
xorg-server vulnerabilities
USN-6555-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled XKB button actions. A…
first Dec 13, 2023 -
Medium max 6.5USN-6508-1 5 CVEs
poppler vulnerabilities
It was discovered that poppler incorrectly handled certain malformed PDF files. If a user or an automated system were tricked into opening a specially crafted PDF file, a remote attacker could possibly use this issue to cause a denial of service. This issue o…
first Nov 23, 2023 -
High max 8.6USN-6500-2 2 CVEs
squid3 vulnerabilities
USN-6500-1 fixed several vulnerabilities in Squid. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Joshua Rogers discovered that Squid incorrectly handled the Gopher protocol. A remote attack…
first Dec 11, 2023 -
Critical max 9.8USN-6475-1 11 CVEs
cobbler vulnerabilities
It was discovered that Cobbler did not properly handle user input, which could result in an absolute path traversal. An attacker could possibly use this issue to read arbitrary files. (CVE-2014-3225) It was discovered that Cobbler did not properly handle user…
first Nov 13, 2023 -
High max 7.4USN-6463-2 2 CVEs
open-vm-tools vulnerabilities
USN-6463-1 fixed vulnerabilities in Open VM Tools. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that Open VM Tools incorrectly handled SAML tokens. A remote attacker wit…
first Dec 6, 2023 -
UnscoredUSN-5681-1 3 CVEs
gThumb vulnerabilities
It was discovered that gThumb did not properly managed memory under certain circumstances. An attacker could possibly use this issue to cause gThumb to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-18718) It was discov…
first Oct 14, 2022 -
UnscoredUSN-5676-1 1 CVE
postgresql-9.5 vulnerability
Alexander Lakhin discovered that PostgreSQL incorrectly handled the security restricted operation sandbox when a privileged user is maintaining another user’s objects. An attacker having permission to create non-temp objects can use this issue to execute arbi…
first Oct 13, 2022 -
UnscoredUSN-5672-1 1 CVE
GMP vulnerability
It was discovered that GMP did not properly manage memory on 32-bit platforms when processing a specially crafted input. An attacker could possibly use this issue to cause applications using GMP to crash, resulting in a denial of service.
first Oct 12, 2022 -
UnscoredUSN-5671-1 2 CVEs
advancecomp vulnerabilities
It was discovered that AdvanceCOMP did not properly manage memory of function be_uint32_read() under certain circumstances. If a user were tricked into opening a specially crafted binary file, a remote attacker could possibly use this issue to cause AdvanceCO…
first Oct 12, 2022 -
UnscoredUSN-5666-1 1 CVE
openssh vulnerability
It was discovered that OpenSSH incorrectly handled certain helper programs. An attacker could possibly use this issue to arbitrary code execution.
first Oct 10, 2022 -
UnscoredUSN-5665-1 2 CVEs
pcre3 vulnerabilities
It was discovered that PCRE incorrectly handled certain regular expressions. A remote attacker could use this issue to cause applications using PCRE to crash, resulting in a denial of service. (CVE-2017-6004) It was discovered that PCRE incorrectly handled ce…
first Oct 10, 2022