8,437 results · Feed
-
UnscoredUSN-5462-2 1 CVE
ruby2.3 vulnerability
USN-5462-1 fixed several vulnerabilities in Ruby. This update provides the corresponding CVE-2022-28739 update for ruby2.3 on Ubuntu 16.04 ESM. Original advisory details: It was discovered that Ruby incorrectly handled certain inputs. An attacker could possib…
first Jun 6, 2022 -
High max 8.4USN-5460-1 10 CVEs
vim vulnerabilities
It was discovered that Vim was incorrectly processing Vim buffers. An attacker could possibly use this issue to perform illegal memory access and expose sensitive information. (CVE-2022-0554) It was discovered that Vim was not properly performing bounds check…
first Jun 6, 2022 -
High max 8.4USN-5458-1 9 CVEs
vim vulnerabilities
It was discovered that Vim was incorrectly handling virtual column position operations, which could result in an out-of-bounds read. An attacker could possibly use this issue to expose sensitive information. (CVE-2021-4193) It was discovered that Vim was not …
first Jun 2, 2022 -
Critical max 9.8USN-5455-1 15 CVEs
libxmltok vulnerabilities
Tim Boddy, Gustavo Grieco and others discovered that Expat, that is integrated in xmltok library, incorrectly handled certain files. An attacker could possibly use these issues to cause a denial of service, or possibly execute arbitrary code. These issues wer…
first Jul 19, 2022 -
UnscoredUSN-5437-1 1 CVE
libxfixes vulnerability
Tobias Stoeckmann discovered that libXfixes incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code.
first May 23, 2022 -
UnscoredUSN-5436-1 2 CVEs
libxrender vulnerabilities
Tobias Stoeckmann discovered that libXrender incorrectly handled certain responses. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2016-7949, CVE-2016-7950)
first May 23, 2022 -
High max 7.8USN-5433-1 9 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled parsing of filenames in its search functionality. If a user were tricked into opening a specially crafted file, an attacker could crash the application, leading to a denial of service. (CVE-2021-3973) It was disc…
first May 23, 2022 -
Critical max 9.8USN-5432-2 2 CVEs
libpng1.6 vulnerabilities
USN-5432-1 fixed vulnerabilities in libpng. This update provides the corresponding updates for libpng1.6. Original advisory details: It was discovered that libpng incorrectly handled memory when parsing certain PNG files. If a user or automated system were tr…
first May 24, 2022 -
Critical max 9.8USN-5432-1 2 CVEs
libpng vulnerabilities
It was discovered that libpng incorrectly handled memory when parsing certain PNG files. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of …
first May 23, 2022 -
UnscoredUSN-5428-1 2 CVEs
libxrandr vulnerabilities
Tobias Stoeckmann discovered that libXrandr incorrectly handled certain responses. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2016-7947, CVE-2016-7948)
first May 18, 2022 -
UnscoredUSN-5454-2 3 CVEs
cups vulnerabilities
USN-5454-1 fixed several vulnerabilities in CUPS. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Joshua Mason discovered that CUPS incorrectly handled the secret key used to access the administrative web interfa…
first May 31, 2022 -
UnscoredUSN-5420-1 3 CVEs
libvorbis vulnerabilities
It was discovered that Vorbis incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2017-14160, CVE-2018-10392, CVE-2018-10393)
first May 12, 2022 -
Medium max 5.3USN-5419-1 3 CVEs
rsyslog vulnerabilities
It was discovered that Rsyslog improperly handled certain invalid input. An attacker could use this issue to cause Rsyslog to crash.
first May 12, 2022 -
UnscoredUSN-5409-1 1 CVE
libsndfile vulnerability
It was discovered that libsndfile was incorrectly performing memory management operations and incorrectly using buffers when executing its FLAC codec. If a user or automated system were tricked into processing a specially crafted sound file, an attacker could…
first May 10, 2022 -
UnscoredUSN-5407-1 4 CVEs
cairo vulnerabilities
Gustavo Grieco, Alberto Garcia, Francisco Oca, Suleman Ali, and others discovered that Cairo incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-9082, CVE-2017-9814, CVE-2019-6462) Stephan Bergm…
first May 10, 2022 -
UnscoredUSN-5405-1 2 CVEs
jbig2dec vulnerabilities
It was discovered that jbig2dec incorrectly handled memory when parsing invalid files. An attacker could use this issue to cause jbig2dec to crash, leading to a denial of service. (CVE-2017-9216) It was discovered that jbig2dec incorrectly handled memory when…
first May 5, 2022 -
High max 8.1USN-5404-2 1 CVE
rsyslog vulnerability
USN-5404-1 addressed a vulnerability in Rsyslog. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Pieter Agten discovered that Rsyslog incorrectly handled certain requests. An attacker could possibly use this issu…
first May 24, 2022 -
Critical max 9.8USN-5402-2 2 CVEs
openssl vulnerabilities
USN-5402-1 fixed several vulnerabilities in OpenSSL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Elison Niven discovered that OpenSSL incorrectly handled the c_rehash script. A local attacker could possibly u…
first May 26, 2022 -
Medium max 6.5USN-5400-2 6 CVEs
mysql-5.7 vulnerabilities
USN-5400-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first May 4, 2022 -
UnscoredUSN-5396-2 1 CVE
ghostscript vulnerability
USN-5396-1 addressed a vulnerability in Ghostscript. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system …
first Jun 8, 2022 -
Medium max 4.3USN-5392-1 2 CVEs
mutt vulnerabilities
It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-32055) It was discovered that Mutt incorrectly handled certain in…
first Apr 28, 2022 -
UnscoredUSN-5391-1 4 CVEs
libsepol vulnerabilities
Nicolas Iooss discovered that libsepol incorrectly handled memory when handling policies. An attacker could possibly use this issue to cause a crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-36084) It was discovered that…
first Apr 27, 2022 -
UnscoredUSN-5389-1 4 CVEs
libcroco vulnerabilities
It was discovered that Libcroco was incorrectly accessing data structures when reading bytes from memory, which could cause a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-7960) It was discovered that …
first Apr 26, 2022 -
UnscoredUSN-5375-1 1 CVE
cflow vulnerability
It was discovered that GNU cflow was incorrectly handling memory cleanup operations at the end of a compilation module. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Apr 12, 2022 -
UnscoredUSN-5371-3 1 CVE
nginx vulnerability
USN-5371-1 and USN-5371-2 fixed several vulnerabilities in nginx. This update provides the corresponding update for CVE-2020-11724 for Ubuntu 16.04 ESM. Original advisory details: It was discovered that nginx Lua module mishandled certain inputs. An attacker …
first Oct 7, 2022 -
UnscoredUSN-5371-1 3 CVEs
nginx vulnerabilities
It was discovered that nginx Lua module mishandled certain inputs. An attacker could possibly use this issue to perform an HTTP Request Smuggling attack. This issue was fixed for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-11724) It was discovered that n…
first Apr 12, 2022 -
Medium max 4.9USN-5369-1 1 CVE
python-oslo.utils vulnerability
It was discovered that oslo.utils incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information.
first Apr 7, 2022 -
High max 7.5USN-5359-2 1 CVE
rsync vulnerability
USN-5359-1 fixed vulnerabilities in rsync. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Danilo Ramos discovered that rsync incorrectly handled memory when performing certain zlib deflating operations. An atta…
first Jun 13, 2022 -
UnscoredUSN-5352-1 1 CVE
libtasn1-6 vulnerability
It was discovered that Libtasn1 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service.
first Mar 28, 2022 -
Medium max 5.9USN-5351-2 1 CVE
paramiko vulnerability
USN-5351-1 fixed a vulnerability in Paramiko. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Jan Schejbal discovered that Paramiko incorrectly handled permissions when writing private key files. A local attacker…
first Mar 30, 2022 -
UnscoredUSN-5349-1 1 CVE
binutils vulnerability
It was discovered that GNU binutils gold incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service.
first Mar 28, 2022 -
Critical max 9.8USN-5348-2 4 CVEs
smarty3 vulnerabilities
USN-5348-1 fixed several vulnerabilities in Smarty. This update provides the fixes for CVE-2021-21408, CVE-2021-26119, CVE-2021-26120 and CVE-2021-29454 for Ubuntu 16.04 ESM. Original advisory details: David Gnedt and Thomas Konrad discovered that Smarty was …
first Mar 28, 2022 -
UnscoredUSN-5344-1 4 CVEs
libdbd-mysql-perl vulnerabilities
It was discovered that the DBD::mysql module, when configured with server-side prepared statement support, was susceptible to operations that would result in improper memory access. An attacker could possibly use this issue to cause DBD::mysql to crash, resul…
first Apr 1, 2022 -
UnscoredUSN-5341-1 3 CVEs
binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled checks for memory allocation when parsing relocs in a corrupt file. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-17122) It was discovered that GNU binutils incorrectl…
first Mar 22, 2022 -
High max 7.3USN-5340-2 5 CVEs
ckeditor vulnerabilities
USN-5340-1 fixed several vulnerabilities in CKEditor. This update provides the fixes for CVE-2018-9861, CVE-2020-9281, CVE-2021-32809, CVE-2021-33829 and CVE-2021-37695 for Ubuntu 16.04 ESM. Original advisory details: Kyaw Min Thein discovered that CKEditor i…
first Mar 23, 2022 -
UnscoredUSN-5336-1 7 CVEs
libjpeg9 vulnerabilities
Aladdin Mubaied discovered that the cjpeg utility in libjpeg9 did not properly validate the input image's size. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2016-3616) It was discovered that the cjpeg …
first Mar 23, 2022 -
High max 7.5USN-6208-1 1 CVE
golang-websocket vulnerability
It was discovered that Gorilla WebSocket incorrectly handled decoding WebSocket frames. An attacker could possibly use this issue to cause a crash, resulting in a denial of service.
first Jul 6, 2023 -
Medium max 6.2USN-6200-1 20 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled the "-authenticate" option for password-protected PDF files. An attacker could possibly use this issue to inject additional shell commands and perform arbitrary code execution. This issue only affected Ub…
first Jul 4, 2023 -
Low max 2.6USN-6199-2 1 CVE
php7.0, php7.2 vulnerability
USN-6199-1 fixed a vulnerability in PHP. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled certain Digest authentication for SOAP. An attacker cou…
first Oct 23, 2023 -
UnscoredUSN-5335-1 15 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain values when processing XPM image data or large images. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause …
first Mar 18, 2022