Lucene search
+L
UbuntuMost viewed

11213 matches found

Ubuntu
Ubuntu
added 2018/05/22 3:30 a.m.91 views

USN-3652-1: Linux kernel vulnerability

Jann Horn and Ken Johnson discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via a sidechannel attack. This flaw is known as Spectre Variant 4. A local attacker could use this to expose sensitive information, including kernel memor...

5.5CVSS7.1AI score0.60631EPSS
SaveExploits3References1
Ubuntu
Ubuntu
added 2017/10/26 4:54 p.m.91 views

USN-3464-1: Wget vulnerabilities

Antti Levomäki, Christian Jalio, and Joonas Pihlaja discovered that Wget incorrectly handled certain HTTP responses. A remote attacker could use this issue to cause Wget to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-13089, CVE-2017-13090 Dawid Golunski...

9.3CVSS7.6AI score0.79855EPSS
SaveExploits9
Ubuntu
Ubuntu
added 2017/08/17 5:03 p.m.91 views

USN-3394-1: libmspack vulnerabilities

It was discovered that libmspack incorrectly handled certain malformed CHM files. A remote attacker could use this issue to cause libmspack to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-6419 It was discovered that libmspack incorrectly handled certain...

7.8CVSS7.2AI score0.02067EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2017/07/31 11:24 p.m.91 views

USN-3366-2: OpenJDK 8 regression

USN-3366-1 fixed vulnerabilities in OpenJDK 8. Unfortunately, that update introduced a regression that caused some valid JAR files to fail validation. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the JPEGImageReader class in...

7.4AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2017/06/22 12:05 a.m.91 views

USN-3324-1: Linux kernel vulnerability

It was discovered that the stack guard page for processes in the Linux kernel was not sufficiently large enough to prevent overlapping with the heap. An attacker could leverage this with another vulnerability to execute arbitrary code and gain administrative privileges...

7.4CVSS7.8AI score0.05186EPSS
SaveExploits4
Ubuntu
Ubuntu
added 2017/05/15 11:50 p.m.91 views

USN-3275-2: OpenJDK 7 vulnerabilities

USN-3275-1 fixed vulnerabilities in OpenJDK 8. This update provides the corresponding updates for OpenJDK 7. Original advisory details: It was discovered that OpenJDK improperly re-used cached NTLM connections in some situations. A remote attacker could possibly use this to cause a Java applicati...

7.7CVSS6.9AI score0.03311EPSS
SaveExploits2
Ubuntu
Ubuntu
added 2017/04/27 2:06 p.m.91 views

USN-3269-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.55 in Ubuntu 14.04 LTS. Ubuntu 16.04 LTS, Ubuntu 16.10 and Ubuntu 17.04 have been updated to MySQL 5.7.18. In addition to security fixes, the...

7.8CVSS6.5AI score0.89924EPSS
SaveExploits8
Ubuntu
Ubuntu
added 2017/03/08 2:11 a.m.91 views

USN-3220-1: Linux kernel vulnerability

Alexander Popov discovered that the NHDLC line discipline implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly gain administrative privileges...

7CVSS6.7AI score0.01021EPSS
SaveExploits2
Ubuntu
Ubuntu
added 2017/02/06 6:42 p.m.91 views

USN-3192-1: Squid vulnerabilities

Saulius Lapinskas discovered that Squid incorrectly handled processing HTTP conditional requests. A remote attacker could possibly use this issue to obtain sensitive information related to other clients' browsing sessions. CVE-2016-10002 Felix Hassert discovered that Squid incorrectly handled...

7.5CVSS6.6AI score0.06766EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2017/02/01 5:56 p.m.91 views

USN-3183-1: GnuTLS vulnerabilities

Stefan Buehler discovered that GnuTLS incorrectly verified the serial length of OCSP responses. A remote attacker could possibly use this issue to bypass certain certificate validation measures. This issue only applied to Ubuntu 16.04 LTS. CVE-2016-7444 Shi Lei discovered that GnuTLS incorrectly...

9.8CVSS7.5AI score0.39657EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2016/10/11 7:26 a.m.91 views

USN-3099-4: Linux kernel (Qualcomm Snapdragon) vulnerabilities

Vladimír Beneš discovered an unbounded recursion in the VLAN and TEB Generic Receive Offload GRO processing implementations in the Linux kernel, A remote attacker could use this to cause a stack corruption, leading to a denial of service system crash. CVE-2016-7039 Marco Grassi discovered a...

7.8CVSS6.9AI score0.07613EPSS
SaveExploits5
Ubuntu
Ubuntu
added 2016/06/27 8:41 p.m.91 views

USN-3017-2: Linux kernel (Raspberry Pi 2) vulnerabilities

Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility IPTSOSETREPLACE events on 64 bit platforms. A local unprivileged attacker could use this to cause a denial of service system crash or execute...

7.8CVSS7.1AI score0.05676EPSS
SaveExploits14
Ubuntu
Ubuntu
added 2016/06/10 5:46 a.m.91 views

USN-3003-1: Linux kernel vulnerabilities

Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linux kernel incorrectly enables scatter/gather I/O. A remote attacker could use this to obtain potentially sensitive information from kernel memory. CVE-2016-2117 Jann Horn discovered that eCryptfs improperly attempted to use...

10CVSS6.8AI score0.2593EPSS
SaveExploits20
Ubuntu
Ubuntu
added 2016/05/16 5:31 p.m.91 views

USN-2978-1: Linux kernel vulnerabilities

David Matlack discovered that the Kernel-based Virtual Machine KVM implementation in the Linux kernel did not properly restrict variable Memory Type Range Registers MTRR in KVM guests. A privileged user in a guest VM could use this to cause a denial of service system crash in the host, expose...

7.8CVSS7.2AI score0.00397EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2016/04/04 6:05 p.m.91 views

USN-2944-1: Libav vulnerabilities

It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program...

8.8CVSS7.1AI score0.14621EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2016/03/14 5:20 p.m.91 views

USN-2932-1: Linux kernel (Vivid HWE) vulnerabilities

Ben Hawkes discovered that the Linux netfilter implementation did not correctly perform validation when handling IPTSOSETREPLACE events. A local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privileges...

8.4CVSS7.2AI score0.03723EPSS
SaveExploits23
Ubuntu
Ubuntu
added 2016/03/01 2:38 p.m.91 views

USN-2914-1: OpenSSL vulnerabilities

Yuval Yarom, Daniel Genkin, and Nadia Heninger discovered that OpenSSL was vulnerable to a side-channel attack on modular exponentiation. On certain CPUs, a local attacker could possibly use this issue to recover RSA keys. This flaw is known as CacheBleed. CVE-2016-0702 Adam Langley discovered th...

10CVSS7.8AI score0.32414EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2016/02/02 2:05 a.m.91 views

USN-2890-1: Linux kernel vulnerabilities

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...

10CVSS6.4AI score0.09235EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2016/02/02 1:41 a.m.91 views

USN-2888-1: Linux kernel (Utopic HWE) vulnerabilities

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...

7CVSS6.3AI score0.0122EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2015/12/17 7:25 a.m.91 views

USN-2841-1: Linux kernel vulnerabilities

Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS. CVE-2015-8104 郭永刚 discovered that the pp...

10CVSS6.4AI score0.02501EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2015/07/27 5:47 p.m.91 views

USN-2686-1: Apache HTTP Server vulnerabilities

It was discovered that the Apache HTTP Server incorrectly parsed chunk headers. A remote attacker could possibly use this issue to perform HTTP request smuggling attacks. CVE-2015-3183 It was discovered that the Apache HTTP Server incorrectly handled the apsomeauthrequired API. A remote attacker...

5CVSS6.6AI score0.73327EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2015/05/20 11:17 a.m.91 views

USN-2612-1: Linux kernel (OMAP4) vulnerabilities

A race condition between chown and execve was discovered in the Linux kernel. A local attacker could exploit this race by using chown on a setuid-user-binary to gain administrative privileges. CVE-2015-3339 Vincent Tondellier discovered an integer overflow in the Linux kernel's netfilter connecti...

6.2CVSS6.7AI score0.00396EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2015/05/05 10:20 p.m.91 views

USN-2599-1: Linux kernel (Utopic HWE) vulnerability

A race condition between chown and execve was discovered in the Linux kernel. A local attacker could exploit this race by using chown on a setuid-user-binary to gain administrative privileges...

6.2CVSS6.8AI score0.00317EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2015/04/30 8:04 a.m.91 views

USN-2586-1: Linux kernel (OMAP4) vulnerability

It was discovered that the Linux kernel's IPv6 networking stack has a flaw that allows using route advertisement RA messages to set the 'hoplimit' to values that are too low. An unprivileged attacker on a local network could exploit this flaw to cause a denial of service IPv6 messages dropped...

3.3CVSS7.1AI score0.03031EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2014/07/05 5:54 p.m.91 views

USN-2271-1: Linux kernel (Saucy HWE) vulnerability

Andy Lutomirski discovered a flaw with the Linux kernel's ptrace syscall on x8664 processors. An attacker could exploit this flaw to cause a denial of service System Crash or potential gain administrative privileges...

6.9CVSS6.7AI score0.02324EPSS
SaveExploits6
Ubuntu
Ubuntu
added 2014/04/26 1:51 p.m.91 views

USN-2179-1: Linux kernel vulnerabilities

A flaw was discovered in the Kernel Virtual Machine KVM subsystem of the Linux kernel. A guest OS user could exploit this flaw to execute arbitrary code on the host OS. CVE-2014-0049 Al Viro discovered an error in how CIFS in the Linux kernel handles uncached write operations. An unprivileged loc...

7.4CVSS7.2AI score0.00775EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2014/02/18 10:36 p.m.91 views

USN-2113-1: Linux kernel (Saucy HWE) vulnerabilities

Saran Neti reported a flaw in the ipv6 UDP Fragmentation Offload UFI in the Linux kernel. A remote attacker could exploit this flaw to cause a denial of service panic. CVE-2013-4563 Mathy Vanhoef discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker...

7.2CVSS6.8AI score0.10209EPSS
SaveExploits13
Ubuntu
Ubuntu
added 2014/02/18 10:12 p.m.91 views

USN-2109-1: Linux kernel vulnerabilities

Vasily Kulikov reported a flaw in the Linux kernel's implementation of ptrace. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. CVE-2013-2929 Stephan Mueller reported an error in the Linux kernel's ansi cprng random number generator. This flaw...

7.2CVSS7.1AI score0.09408EPSS
SaveExploits5
Ubuntu
Ubuntu
added 2014/01/03 10:29 a.m.91 views

USN-2065-1: Linux kernel (EC2) vulnerabilities

Stephan Mueller reported an error in the Linux kernel's ansi cprng random number generator. This flaw makes it easier for a local attacker to break cryptographic protections. CVE-2013-4345 A flaw was discovered in the Linux kernel's IP Virtual Server IPVS support. A local user with the CAPNETADMI...

7CVSS6.7AI score0.03209EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2013/03/22 11:36 p.m.91 views

USN-1778-1: Linux kernel (OMAP4) vulnerabilities

Andrew Jones discovered a flaw with the xeniret function in Linux kernel's Xen virtualizeation. In the 32-bit Xen paravirt platform an unprivileged guest OS user could exploit this flaw to cause a denial of service crash the system or gain guest OS privilege. CVE-2013-0228 A flaw was reported in...

6.5CVSS6.8AI score0.01557EPSS
SaveExploits6
Ubuntu
Ubuntu
added 2013/03/22 11:16 p.m.91 views

USN-1775-1: Linux kernel vulnerabilities

A flaw was reported in the permission checks done by the Linux kernel for /dev/cpu//msr. A local root user with all capabilities dropped could exploit this flaw to execute code with full root capabilities. CVE-2013-0268 A flaw was discovered in the Linux kernels handling of memory ranges with...

6.2CVSS6.9AI score0.01557EPSS
SaveExploits6
Ubuntu
Ubuntu
added 2013/01/14 10:59 p.m.91 views

USN-1687-2: NSPR update

USN-1687-1 fixed a vulnerability NSS. This update provides the NSPR needed to use the new NSS. Original advisory details: Two intermediate CA certificates were mis-issued by the TURKTRUST certificate authority. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw...

8.4AI score
SaveExploits0
Ubuntu
Ubuntu
added 2012/11/30 9:25 a.m.91 views

USN-1648-1: Linux kernel vulnerabilities

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

6.2CVSS6.7AI score0.00959EPSS
SaveExploits4
Ubuntu
Ubuntu
added 2012/03/06 6:38 p.m.91 views

USN-1388-1: Linux kernel (EC2) vulnerabilities

Paolo Bonzini discovered a flaw in Linux's handling of the SGIO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. CVE-2011-4127 A flaw was found in KVM's Programmable Interval Timer PIT...

7.1CVSS6.8AI score0.02701EPSS
SaveExploits5
Ubuntu
Ubuntu
added 2012/02/03 10:30 p.m.91 views

USN-1355-2: Mozvoikko update

USN-1355-1 fixed vulnerabilities in Firefox. This update provides an updated Mozvoikko package for use with the latest Firefox. Original advisory details: It was discovered that if a user chose to export their Firefox Sync key the "Firefox Recovery Key.html" file is saved with incorrect...

8.4AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2011/11/29 6:16 p.m.91 views

USN-1285-1: Linux kernel vulnerabilities

Andrea Righi discovered a race condition in the KSM memory merging support. If KSM was being used, a local attacker could exploit this to crash the system, leading to a denial of service. CVE-2011-2183 Vasily Averin discovered that the NFS Lock Manager NLM incorrectly handled unlock requests. A...

7.2CVSS7.6AI score0.00541EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2011/10/12 12:25 p.m.91 views

USN-1228-1: Linux kernel (OMAP4) vulnerabilities

Timo Warns discovered that the EFI GUID partition table was not correctly parsed. A physically local attacker that could insert mountable devices could exploit this to crash the system or possibly gain root privileges. CVE-2011-1776 Dan Rosenberg discovered that the IPv4 diagnostic routines did n...

9.1CVSS7.9AI score0.05044EPSS
SaveExploits5
Ubuntu
Ubuntu
added 2011/09/29 9:54 p.m.91 views

USN-1222-1: Firefox vulnerabilities

Benjamin Smedberg, Bob Clary, Jesse Ruderman, Bob Clary, Andrew McCreight, Andreas Gal, Gary Kwong, Igor Bukanov, Jason Orendorff, Jesse Ruderman, and Marcia Knous discovered multiple memory vulnerabilities in the browser rendering engine. An attacker could use these to possibly execute arbitrary...

10CVSS8.6AI score0.05459EPSS
SaveExploits4
Ubuntu
Ubuntu
added 2011/09/14 7:37 p.m.91 views

USN-1208-1: Linux kernel (Marvel DOVE) vulnerabilities

Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Alex Shi and Eric Dumazet discovered that the network stack...

7.8CVSS6.8AI score0.08793EPSS
SaveExploits24
Ubuntu
Ubuntu
added 2011/04/30 12:30 a.m.91 views

USN-1121-1: Firefox vulnerabilities

Boris Zbarsky, Gary Kwong, Jesse Ruderman, Michael Wu, and Ted Mielczarek discovered multiple memory vulnerabilities. An attacker could exploit these to possibly run arbitrary code as the user running Firefox. CVE-2011-0079 It was discovered that there was a vulnerability in the memory handling o...

10CVSS8.7AI score0.06914EPSS
SaveExploits4
Ubuntu
Ubuntu
added 2011/03/07 10:33 p.m.91 views

USN-1049-2: Firefox and Xulrunner regression

USN-1049-1 fixed vulnerabilities in Firefox and Xulrunner. That update introduced a regression where some Java applets would fail to load. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff...

9.2AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2011/03/03 12:49 a.m.91 views

USN-1083-1: Linux kernel vulnerabilities

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service...

10CVSS7.3AI score0.17009EPSS
SaveExploits93
Ubuntu
Ubuntu
added 2010/09/17 2:56 p.m.91 views

USN-988-1: Linux kernel vulnerabilities

Ben Hawkes discovered that the Linux kernel did not correctly validate memory ranges on 64bit kernels when allocating memory on behalf of 32bit system calls. On a 64bit system, a local attacker could perform malicious multicast getsockopt calls to gain root privileges. CVE-2010-3081 Ben Hawkes...

7.8CVSS7.3AI score0.03818EPSS
SaveExploits6
Ubuntu
Ubuntu
added 2010/01/28 6:38 p.m.91 views

USN-893-1: Samba vulnerability

Ronald Volgers discovered that the mount.cifs utility, when installed as a setuid program, suffered from a race condition when verifying user permissions. A local attacker could trick samba into mounting over arbitrary locations, leading to a root privilege escalation...

4.4CVSS7.2AI score0.00517EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2009/09/01 9:40 p.m.91 views

USN-827-1: Dnsmasq vulnerabilities

IvAin Arce, Pablo HernAin Jorge, Alejandro Pablo Rodriguez, MartA­n Coco, Alberto SoliAto Testa and Pablo Annetta discovered that Dnsmasq did not properly validate its input when processing TFTP requests for files with long names. A remote attacker could cause a denial of service or execute...

6.8CVSS5.6AI score0.12684EPSS
SaveExploits8
Ubuntu
Ubuntu
added 2008/05/20 1:00 p.m.91 views

USN-612-7: OpenSSH update

USN-612-2 introduced protections for OpenSSH, related to the OpenSSL vulnerabilities addressed by USN-612-1. This update provides the corresponding updates for OpenSSH in Ubuntu 6.06 LTS. While the OpenSSL in Ubuntu 6.06 is not vulnerable, this update will block weak keys generated on systems tha...

7.8CVSS6.7AI score0.70721EPSS
SaveExploits11
Ubuntu
Ubuntu
added 2008/01/19 2:54 a.m.91 views

USN-571-2: X.org regression

USN-571-1 fixed vulnerabilities in X.org. The upstream fixes were incomplete, and under certain situations, applications using the MIT-SHM extension e.g. Java, wxWidgets would crash with BadAlloc X errors. This update fixes the problem. We apologize for the inconvenience. Original advisory detail...

8.4AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2008/01/16 8:38 p.m.91 views

USN-570-1: boost vulnerabilities

Will Drewry and Tavis Ormandy discovered that the boost library did not properly perform input validation on regular expressions. An attacker could send a specially crafted regular expression to an application linked against boost and cause a denial of service via application crash...

5CVSS5.2AI score0.02686EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2007/03/08 7:04 a.m.91 views

USN-432-1: GnuPG vulnerability

Gerardo Richarte from Core Security Technologies discovered that when gnupg is used without --status-fd, there is no way to distinguish initial unsigned messages from a following signed message. An attacker could inject an unsigned message, which could fool the user into thinking the message was...

5CVSS5.4AI score0.05359EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2006/06/08 11:33 p.m.91 views

USN-291-1: FreeType vulnerabilities

Several integer overflows have been discovered in the FreeType library. By tricking a user into installing and/or opening a specially crafted font file, these could be exploited to execute arbitrary code with the privileges of that user...

7.5CVSS5.8AI score0.16172EPSS
SaveExploits2
Total number of security vulnerabilities5000