8,437 results · Feed
-
High max 7.5USN-4478-2 1 CVE
python-rsa vulnerability
USN-4478-1 fixed a vulnerability in Python-RSA. This update provides the corresponding update for Ubuntu 16.04 ESM, Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. Original advisory details: It was discovered that Python-RSA incorrectly handled certain ciphertexts. An…
first Feb 21, 2022 -
UnscoredUSN-4812-1 2 CVEs
libbson vulnerabilities
It was discovered that libbson incorrectly validated input length. An attacker could possibly use this issue to cause a denial of service. This issue affected only Ubuntu 16.04 ESM. (CVE-2017-14227) It was discovered that libbson incorrectly handled certain s…
first Mar 15, 2021 -
UnscoredUSN-4811-1 1 CVE
libzip vulnerability
It was discovered that libzip mishandled certain malformed ZIP archives. A remote attacker could use this vulnerability to cause a denial of service.
first Mar 15, 2021 -
UnscoredUSN-4809-1 1 CVE
x265 vulnerability
It was discovered that VideoLAN x265 mishandled certain memory-allocation inputs. An attacker could use this vulnerability to cause a denial of service (crash)
first Mar 15, 2021 -
UnscoredUSN-4807-1 4 CVEs
wildmidi vulnerabilities
It was discovered that WildMIDI incorrectly handled certain MID files. A remote attacker could possibly use this issue to cause a denial of service.
first Mar 15, 2021 -
Medium max 6.5USN-5658-2 2 CVEs
isc-dhcp vulnerabilities
USN-5658-1 fixed vulnerabilities in DHCP. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: It was discovered that DHCP incorrectly handled option reference counting. A remote attacker could possibly use this issu…
first Nov 7, 2022 -
UnscoredUSN-5453-1 1 CVE
freetype vulnerability
It was discovered that FreeType incorrectly handled certain font files. An attacker could possibly use this issue to cause a denial of service.
first May 30, 2022 -
UnscoredUSN-5449-1 1 CVE
libxv vulnerability
It was discovered that libXv incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code.
first May 26, 2022 -
UnscoredUSN-5446-2 1 CVE
dpkg vulnerability
USN-5446-1 fixed a vulnerability in dpkg. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Max Justicz discovered that dpkg incorrectly handled unpacking certain source packages. If a user or an automated system w…
first May 30, 2022 -
UnscoredUSN-5262-1 2 CVEs
gdisk vulnerabilities
The potential for an out of bounds write due to a missing bounds check was discovered to impact the sgdisk utility of GPT fdisk. Exploitation requires the use of a maliciously formatted storage device and could cause sgdisk to crash as well as possibly allow …
first Feb 3, 2022 -
High max 7.0USN-5261-1 2 CVEs
passenger vulnerabilities
It was discovered that Phusion Passenger incorrectly handled a file path in the application root folder. An attacker could possibly use this issue to read arbitrary files. (CVE-2017-16355) It was discovered that Phusion Passenger had a race condition in the n…
first Feb 1, 2022 -
UnscoredUSN-5259-3 1 CVE
cron regression
USN-5259-1 and USN-5259-2 fixed vulnerabilities in Cron. Unfortunately that update was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the postin…
first May 11, 2022 -
High max 8.6USN-4989-2 2 CVEs
bluez vulnerabilities
USN-4989-1 fixed several vulnerabilities in BlueZ. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that BlueZ incorrectly checked certain permissions when pairing. A local attacker could possibl…
first Jun 16, 2021 -
Medium max 6.8
libimage-exiftool-perl vulnerability
USN-4987-1 fixed a vulnerability in ExifTool. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that ExifTool did not properly sanitize user data for the DjVu file format. An attacker could use th…
first Feb 8, 2022 -
High max 8.1USN-4791-1 2 CVEs
tomcat7 vulnerabilities
It was discovered that Apache Tomcat 7 did not protect applications from the presence of untrusted client data in an environment variable. A remote attacker could possible use this vulnerability to redirect the traffic to an arbitrary proxy and obtain sensiti…
first Mar 15, 2021 -
UnscoredUSN-4788-1 1 CVE
iperf3 vulnerability
It was discovered that iperf mishandled certain UTF-8 and UTF-16 strings. A remote attacker could use this vulnerability to cause a denial of service or possibly execute arbitrary code.
first Mar 15, 2021 -
Medium max 5.5USN-4336-2 147 CVEs
binutils vulnerabilities
USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that GNU binutils contained a large number of security issues. If a user or automated sy…
first Jul 21, 2021 -
UnscoredUSN-4442-2 3 CVEs
sympa vulnerabilities
USN-4442-1 fixed vulnerabilities in Sympa. This update provides the corresponding updates for Ubuntu 16.04 ESM, Ubuntu 18.04 ESM and Ubuntu 20.04 ESM. Original advisory details: Nicolas Chatelain discovered that Sympa incorrectly handled environment variables…
first Mar 15, 2021 -
Medium max 4.9USN-8469-1 2 CVEs
ffmpeg vulnerabilities
Jiasheng Jiang discovered that FFmpeg incorrectly handled memory in certain error-handling paths of its TensorFlow DNN backend. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS. (CVE-2025-12343)…
first Jun 24, 2026 -
High max 7.5USN-8457-2 2 CVEs
mysql-8.0 vulnerabilities
USN-8457-1 fixed several vulnerabilities in MySQL. This update provides the corresponding fixes for MySQL on Ubuntu 20.04 LTS Original advisory details: It was discovered that MySQL Router incorrectly handled repeated TLS protocol upgrade requests. An unauthe…
-
Medium max 6.7USN-8193-2 1 CVE
libcap2 vulnerability
USN-8193-1 fixed a vulnerability in libcap. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: Ali Raza discovered that libcap incorrectly handled file capab…
first Jun 23, 2026 -
Critical max 10.0USN-8465-1 4 CVEs
mina2 vulnerabilities
It was discovered that Apache MINA lacked an acceptMatchers allowlist mechanism to restrict which classes could be deserialized. An attacker could use this to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-52…
first Jun 23, 2026 -
High max 7.1USN-8464-1 1 CVE
libnfs vulnerability
It was discovered that LIBNFS incorrectly handled certain string sizes when connecting to an NFS server. An attacker could use this issue to cause LIBNFS to crash, resulting in a denial of service, or possibly execute arbitrary code.
-
High max 8.8USN-8463-1 4 CVEs
libvncserver vulnerabilities
It was discovered that LibVNCServer had a memory leak in the client cleanup function. An attacker could possibly use this issue to cause LibVNCServer to consume memory, leading to a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2020-29260…
-
Medium max 6.5USN-8460-1 2 CVEs
libxml2 vulnerabilities
It was discovered that libxml2 did not properly release memory allocated in the xmllint utility. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-1757) A type confusion vulnerability was found in libxml2 when processing a spec…
first Jun 22, 2026 -
High max 7.5USN-8457-1 2 CVEs
mysql-8.0, mysql-8.4 vulnerabilities
It was discovered that MySQL Router incorrectly handled repeated TLS protocol upgrade requests. An unauthenticated remote attacker could possibly use this issue to cause MySQL Router to crash, resulting in a denial of service. (CVE-2026-46862) It was discover…
-
High max 7.6USN-8455-1 2 CVEs
netatalk vulnerabilities
Arjun Basnet discovered that Netatalk improperly validated inputs when unmarshalling Spotlight Remote Procedure Call. A remote authenticated attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2026-44066) …
-
UnscoredUSN-8449-1 0 CVEs
ldns vulnerability
Pablo Ruiz discovered that ldns did not properly validate DNS responses when used as a stub resolver over UDP. A remote attacker could possibly use this issue to inject arbitrary DNS responses.
first Jun 18, 2026 -
UnscoredUSN-8055-2 0 CVEs
evolution-data-server vulnerability
USN-8055-1 fixed a vulnerability in Evolution Data Server. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Evolution Data Server incorrectly handled removing local cach…
first Jun 1, 2026 -
UnscoredUSN-8055-1 0 CVEs
evolution-data-server vulnerability
It was discovered that Evolution Data Server incorrectly handled removing local cache files. An attacker could possibly use this issue to cause Evolution Data Server to remove arbitrary files.
first Feb 23, 2026 -
UnscoredUSN-8019-1 0 CVEs
tracker-miners vulnerabilities
Fatih Çelik discovered that tracker-miners incorrectly handled certain malformed MP3 files. An attacker could use this issue to cause tracker-miners to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Feb 5, 2026 -
Medium max 6.5USN-8453-1 2 CVEs
libnet-cidr-lite-perl vulnerabilities
It was discovered that Net::CIDR::Lite incorrectly validated IP address and CIDR mask inputs. An attacker could possibly use this issue to bypass IP access control lists. (CVE-2026-45190) It was discovered that Net::CIDR::Lite incorrectly handled extraneous z…
-
Critical max 9.8USN-8450-1 4 CVEs
tomcat11 vulnerabilities
It was discovered that Tomcat did not properly limit the size of WebDAV LOCK and PROPFIND request bodies. A remote attacker could possibly use this issue to cause Tomcat to consume excessive memory, resulting in a denial of service. (CVE-2026-41284) It was di…
-
Critical max 9.1USN-8452-1 1 CVE
node-pbkdf2 vulnerability
Nikita Skovoroda discovered that pbkdf2 did not properly validate certain algorithm names. An attacker could possibly use this issue to generate predictable cryptographic keys, resulting in signature spoofing.
-
Critical max 9.8USN-8448-1 1 CVE
dolibarr vulnerability
It was discovered that Dolibarr incorrectly handled user-supplied database name values during installation. A remote attacker could possibly use this issue to execute arbitrary code.
first Jun 17, 2026 -
UnscoredUSN-8442-1 0 CVEs
kitty vulnerabilities
It was discovered that kitty incorrectly handled certain image data. An attacker able to write to the terminal's input could possibly use this issue to cause kitty to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-33633…
first Jun 17, 2026 -
UnscoredUSN-8425-1 0 CVEs
libnginx-mod-js vulnerability
It was discovered that njs did not properly handle certain client- controlled variables when processing ngx.fetch() requests. An attacker could possibly use this issue to trigger a heap buffer overflow, resulting in arbitrary code execution or a denial of ser…
first Jun 11, 2026 -
Medium max 6.5USN-8446-1 2 CVEs
gst-plugins-bad1.0 vulnerabilities
It was discovered that GStreamer Bad Plugins incorrectly handled parsing H.266/VVC picture partition data. An attacker could use this issue to cause GStreamer Bad Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-202…
-
High max 8.6USN-8445-1 1 CVE
libconfig-inifiles-perl vulnerability
It was discovered that Config-IniFiles incorrectly handled the -file argument in certain situations. An attacker could possibly use this issue to execute arbitrary commands or overwrite arbitrary files.
-
High max 7.3USN-8444-1 1 CVE
graphite2 vulnerability
It was discovered that Graphite incorrectly handled memory when running certain actions. An attacker could use this issue to cause Graphite to crash, resulting in a denial of service, or possibly execute arbitrary code.