Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-7237-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7237-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Ubuntu 14.04 LTS : Linux kernel vulnerability (USN-7232-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7232-1 advisory. A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following...

Ubuntu: Security Advisory (USN-7230-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7230-2: FRR vulnerabilities

Iggy Frankovic discovered that FRR incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. CVE-2024-44070 It was discovered that FRR re-validated all routes in...

USN-7229-1: ClamAV vulnerability

It was discovered that ClamAV incorrectly handled decrypting OLE2 content. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service...

Ubuntu 22.04 LTS : Linux kernel (Xilinx ZynqMP) vulnerabilities (USN-7179-4)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7179-4 advisory. Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type- confusion error. A physically proximate remote...

Ubuntu 18.04 LTS : Quagga vulnerability (USN-7230-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7230-1 advisory. Iggy Frankovic discovered that Quagga incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause Quagga to crash, resultin...

[SECURITY] [DLA 4029-1] frr security update

From: Arturo Borrero Gonzalez [email protected] To: [email protected] Subject: SECURITY DLA 4029-1 frr security update - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4029-1 [email protected]...

CVE-2025-0648

Unexpected server crash in database driver in M-Files Server before 25.1.14445.5 and before 24.8 LTS SR3 allows a highly privileged attacker to cause denial of service via configuration change...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : PCL vulnerability (USN-7227-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7227-1 advisory. It was discovered that PCL incorrectly handled certain malformed files. If a user or automated system were...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : HTMLDOC vulnerabilities (USN-7225-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7225-1 advisory. It was discovered that HTMLDOC incorrectly handled memory in the imagesetmask,...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Cacti vulnerability (USN-7226-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7226-1 advisory. It was discovered that Cacti did not properly sanitize the 'pollerid' parameter in the remoteagent.php file. A remote attacker could...

Ubuntu 18.04 LTS : Django vulnerability (USN-7205-2)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7205-2 advisory. USN-7205-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 LTS. Tenable has extracted the preceding description...

USN-7225-1: HTMLDOC vulnerabilities

It was discovered that HTMLDOC incorrectly handled memory in the imagesetmask, gitreadlzw, writeheader and writenode functions, which could lead to a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected...

USN-7224-1 cyrus-imapd vulnerabilities

It was discovered that non-authentication-related HTTP requests could be interpreted in an authentication context by a Cyrus IMAP Server when multiple requests arrived over the same connection. An unauthenticated attacker could possibly use this issue to perform a privilege escalation attack. Thi...

USN-7222-1: BlueZ vulnerabilities

Lucas Leong discovered that BlueZ incorrectly handled the Phone Book Access profile. If a user were tricked into connecting to a malicious Bluetooth device, a remote attacker could possibly use this issue to execute arbitrary code...

Debian dla-3685 : debian-security-support - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3685 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3685-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-3703 : fonts-opensymbol - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3703 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3703-1 [email protected]...

USN-7221-1: Linux kernel (OEM) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystem: - Bluetooth drivers; CVE-2024-53238, CVE-2024-56757...

[SECURITY] [DLA 4016-1] ucf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4016-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 21, 2025 https://wiki.debian.org/LTS -...