Canonical

89 results · Clear filters · Feed

• Medium 5.6
  CVE-2020-8833

  Apport race condition in crash report permissions

  Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protected_symlinks is disabled, this can be exploited between the os.open and os.chown calls when t…

  Canonical Apport apport Ubuntu
  Apr 22, 2020
• Medium 4.3
  CVE-2019-7306

  Byobu apport hook uploads user's ~/.screenrc

  Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu

  Canonical byobu byobu byobu Debian Ubuntu
  Apr 17, 2020
• Medium 5.8
  CVE-2019-7305

  eXtplorer exposes /usr and /etc/extplorer over HTTP

  Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile patch file debian/patches/debian-changes-2.1.0b6+dfsg-1 or debian/patches/adds-a-makefile.patch, this…

  Canonical eXtplorer extplorer Ubuntu
  Apr 9, 2020
• Medium 4.7
  CVE-2019-15795

  python-apt uses MD5 for validation

  python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py in version 1.9.0ubuntu1 and earlier. This allows a man-in-the-middle attack which could potentially be used to install altered p…

  Canonical Python-apt python-apt python-apt Debian Ubuntu PyPI
  Mar 26, 2020
• Medium 4.7
  CVE-2019-15796

  python-apt downloads from untrusted sources

  Python-apt doesn't check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py or in `_fetch_archives()` of apt/cache.py in version 1.9.3ubuntu2 and earlier. This allows downloads from unsigned repositories which shou…

  Canonical Python-apt python-apt python-apt Debian Ubuntu PyPI
  Mar 26, 2020
• Medium 6.3
  CVE-2019-11484

  Integer overflow in bson_ensure_space

  Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.

  Canonical whoopsie whoopsie duo-unix Ubuntu
  Feb 8, 2020
• Medium 4.2
  CVE-2019-11482

  Race condition between reading current working directory and writing a core dump

  Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written in arbitrary directories.

  Canonical Apport apport Ubuntu
  Feb 8, 2020
• Medium 5.7
  CVE-2019-7303 Public exploit

  Snapd seccomp filter TIOCSTI ioctl bypass

  A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, …

  Canonical snapd snapd snapd Debian Ubuntu
  Apr 23, 2019
• Medium 4.6
  CVE-2018-10896

  The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init…

  Canonical cloud-init
  Aug 1, 2018